manage-kucoin-en.framer.ai
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of manage-kucoin-en.framer.ai
This domain appears to host a webpage presenting itself as a KuCoin login or account-management portal for cryptocurrency users. The page title and meta description reference signing in, managing crypto assets, tracking price alerts, and sending or receiving digital currency, while the screenshot shows KuCoin branding and exchange-related promotional content.
Based on the hostname structure, this is not the primary KuCoin domain but a subdomain under framer.ai, a website-building and hosting platform. That suggests the page may be a third-party hosted landing page rather than an official exchange property. The content appears aimed at cryptocurrency account access, which is a high-risk use case because visitors may be prompted to enter credentials or wallet-related information.
Safety Assessment for manage-kucoin-en.framer.ai
Multiple warning signals were present at the time of this scan. The domain was flagged by 14 out of 91 security engines, with the detections broadly classifying it as phishing or malicious. In addition, the domain closely resembles kucoin.com in plain language and may be a look-alike intended to imitate the cryptocurrency exchange's branding. The page metadata and screenshot reinforce that concern by prominently using KuCoin naming and login-related language on a non-official-looking host.
Other signals were mixed. The malware scan did not identify flagged files at the time of analysis, and major content-focused threat databases listed in the scan were clean. However, the domain's IP address was listed on one mail-reputation blocklist, which is a weaker signal than direct phishing detections but still worth noting. The site also had no Tranco ranking and was hosted on a general-purpose site-building platform, which can be consistent with quickly deployed impersonation pages.
Taken together, the combination of multi-engine phishing detections, brand resemblance, and login-themed cryptocurrency content suggests elevated risk. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was served over HTTPS with a valid Let's Encrypt certificate that, at the time of this scan, was set to expire on 2026-09-23. It resolved to IP address 31.43.160.6 and appeared to be hosted by Framer B.V in Amsterdam, using a Framer web server. The page also loaded assets from framer.com and framerusercontent.com, which is consistent with deployment on the Framer platform.
DNSSEC was not enabled for the domain, and the protocol version was not identified in the provided scan data. While the TLS certificate was valid, that alone does not verify legitimacy; phishing pages commonly use valid HTTPS certificates as well. The more notable technical concern here is the use of a branded cryptocurrency login theme on a hosted subdomain that appears unrelated to the official exchange domain.
Share your experience with this website. Was it safe? Did you encounter any issues?