kucoinporc[.]com

Analysis indicates that kucoinporc.com is a confirmed phishing domain targeting users of the KuCoin cryptocurrency exchange. The domain was registered on February 21, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with fraudulent infrastructure. Infrastructure analysis reveals the domain resolves to IP address 159.138.247.173, located in Thailand under AS136907 (HUAWEI CLOUDS), a hosting provider commonly utilized for malicious campaigns. Nameservers are configured as a.share-dns.com and b.share-dns.net, a pattern observed in other phishing operations.

The domain was flagged by PhishDestroy and appears on at least one security blocklist, though its current status is offline. No SSL certificate was detected, increasing the likelihood of interception or tampering during user interaction. The page title, 'KuCoinpor,' suggests an attempt to mimic the legitimate KuCoin brand, though the exact content and functionality of the site remain unanalyzed. VirusTotal reports that 2 of 95 security vendors have flagged the domain, providing additional confirmation of its malicious nature.

Defenders should treat this domain as part of a broader crypto scam operation. Network-level blocking of the IP (159.138.247.173) and associated nameservers is recommended to mitigate further risk. Organizations should also monitor for related domains registered through Gname.com Pte. Ltd. or hosted on HUAWEI CLOUDS infrastructure, as these may indicate additional phishing campaigns. Given the domain's current offline status, further monitoring is advised to detect potential reactivation or migration to new infrastructure.