coinku[.]one

The domain coinku.one is currently active and poses a phishing threat to cryptocurrency users. Despite having zero detections on VirusTotal, it is already listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL. This early detection highlights the domain's freshness and the potential risk it poses during the critical pre-propagation window.

Registered through NameSilo, LLC, coinku.one is hosted on an IP address associated with Microsoft Corporation in Indonesia. The use of Let's Encrypt for SSL certification suggests an attempt to appear legitimate and secure to unsuspecting users. The domain was created on June 20, 2026, and was swiftly detected by PhishDestroy on June 22, 2026, underscoring the rapid deployment of this phishing operation.

Phishing domains like coinku.one exploit the gap between their registration and their appearance in antivirus databases, which typically takes 24-72 hours. PhishDestroy's systems are designed to identify such threats during this vulnerable period, providing crucial early warnings before they can propagate widely. The presence of coinku.one on multiple blocklists further indicates the seriousness of the threat it poses to cryptocurrency users.