kucoin[.]created[.]app

Analysis of kucoin.created.app on August 05, 2026 identifies it as an active phishing domain targeting cryptocurrency users. The domain was registered through Created App, a platform that allows rapid domain creation without traditional registrar scrutiny. Infrastructure checks reveal the domain resolves to IP address 216.150.16.129, though nameserver records return NS_NOT_FOUND, indicating potential DNS misconfiguration or deliberate obfuscation. At the time of this report, the domain appears on one security blocklist, having been flagged by PhishDestroy.

No detections are recorded among the 91 vendors that scanned the domain on VirusTotal, though the absence of detections does not confirm safety and may reflect delayed vendor updates or evasion techniques. The domain remains operational, with no indications of takedown or sinkholing. No additional context is available regarding the specific phishing kit, targeted brand beyond the domain name, or the exact content hosted on the site. Defenders should treat kucoin.created.app as a high-risk indicator, particularly in environments handling cryptocurrency transactions or user credentials.

Network-level blocking is recommended, alongside monitoring for connections to 216.150.16.129. Further investigation is required to determine the scope of the campaign, including whether the site employs credential harvesting, fake wallet prompts, or other malicious payloads. Given the domain's association with a known crypto brand in its name, organizations should prioritize alerting users to potential impersonation attempts and verifying any communications or links referencing kucoin.created.app.