Security Scan Report: secure-en-us-kcoin.square.site

Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 2 countries across 12 domains to perform 101 HTTP transactions. The main domain is square.site and was registered 7 years ago.

Submitted URL: https://secure-en-us-kcoin.square.site/s/shop

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

A hollow Square-built storefront using the KuCoin name on a deceptive 'secure-en-us-kcoin' subdomain, with a primary-domain phishing report. No working login form yet, but the page is built to wear a crypto exchange's brand, not to sell anything.

Risk Factors (5)
Brand impersonation of KuCoin on a non-official, third-party subdomain
Deceptive hostname constructed from 'secure' + locale + exchange name
Phishing report on the primary domain (OpenPhish)
Unranked domain using a top-tier crypto exchange brand
Login-themed page with no functioning login form (placeholder staging shell)
Domain age information unavailable

Details

Page Title

Kucoin Login

Scan Type

public

Domain Name Analysis

You're looking at domain 'secure-en-us-kcoin.square.site' on the .site top-level domain, featuring subdomain 'secure-en-us-kcoin'. Count 6 characters in 'square' split between 3 vowels and three consonants. It segments into 1 word: square. Median word length comes out to six characters. No strong language cues emerged from the frequency lists.

Screenshot

Kucoin Login Shop All Q Browse by category Items aren't available for sale yet on this page. Come back later to purchase! Allltems Kucoin Login Shop All Stay in the loop Email ‘This forms prote...

Page Load Overview

3.46s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:100%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en_GB
Text Length:485 chars
Detector Agreement:79%

Website Classification

Primary Category

e-commerce shopping57% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
57%
cryptocurrency blockchain
50%
technology software
34%
adult content
29%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
64146.75.121.46Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
1874.115.51.5United States
AS27647Weebly, Inc.
6104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
674.115.51.4United States
AS27647Weebly, Inc.
6142.251.157.119Google · CDNUnited States
AS15169Google LLC
6142.251.154.120Google · CDNUnited States
AS15169Google LLC
6162.159.136.66Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.150.119Google · CDNUnited States
AS15169Google LLC
6142.251.152.120Google · CDNUnited States
AS15169Google LLC
6142.251.157.120Google · CDNUnited States
AS15169Google LLC
10116--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T129D5D043D0E14ABE3D1742ABE38EEA34F3297CC2CAD17E593D4845844AC8BF9945F991

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:8oqvq9zq9lkcVnHSn5lBHZYT0JRJQ7ods4GPlHwo8HxzJphdJBNT/TFJ5J9Zp/a0:f7BNACkiAGPaa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2901216:FWQihSOBQBEhEBA4LJjAR4YboEwkIgoWgIBoCQ6ThA1MhxEBCQ8LAGAFgTQEnQQCATBCTcCWGQKMBCgHAAQiGgIAUBB1ga4K

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffff0000ffff
Perceptual Hash:b7becc08b3a34c8c
Difference Hash:6d4c600809300800
Wavelet Hash:bfa7bfaf000000fe
Color Hash:07000000000

Scan History

Scan history not available

Unable to load historical scan data