app[.]kucoin-ic[.]top

This domain is flagged for elevated-risk brand impersonation targeting KuCoin, a major cryptocurrency exchange platform. Analysis indicates the infrastructure is designed to deceive users into believing they are interacting with the legitimate KuCoin service, potentially facilitating unauthorized access to accounts or funds. The specific threat type—brand impersonation—is confirmed by the page title matching the official KuCoin branding and the domain’s association with known fraudulent activity patterns. Infrastructure analysis reveals multiple high-risk indicators. The domain app.kucoin-ic.top was registered on March 21, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with suspicious domains. It resolves to the IP address 176.97.117.190, hosted in Singapore under Trunk Networks LTD, a provider linked to prior malicious activity. The domain is currently offline but was previously blocked by PhishDestroy and flagged by 21 out of 95 security vendors on VirusTotal. No SSL certificate was detected, further reducing its legitimacy. Additionally, the domain appears on at least one security blocklist, reinforcing its classification as a threat. Mitigation steps for this brand impersonation threat include immediate verification of all cryptocurrency transaction sources. Users should cross-check domain names, SSL certificates, and registrar details before engaging with any exchange-related communications or platforms. Organizations should update blocklists to include this domain and its associated IP address, while end-users should enable multi-factor authentication on all financial accounts. Given the domain’s creation date and registrar, monitoring for similar patterns—such as newly registered domains under Gname.com Pte. Ltd. or those resolving to the same IP range—can help preemptively identify related threats. If interaction with this domain occurred, account credentials and transaction histories should be audited for unauthorized activity.