kcoin-app[.]com

Analysis of kcoin-app.com indicates a freshly registered domain created on 13 March 2026 that is currently offline. The site presents a page title of “KuCoin”, aligning with the listed brand target KuCoin and the classification as a crypto‑scam. No TLS certificate is observed, meaning the domain serves content over plain HTTP, which is atypical for legitimate financial services. Infrastructure inspection reveals the domain is hosted behind Cloudflare, using the IP address 188.114.97.3 located in Canada and employing Cloudflare’s DNS with the nameservers carlane.ns.cloudflare.com and trace.ns.cloudflare.com. The web stack includes Node.js, React, Next.js, Webpack and HTTP/3, all common components for modern web applications, but their presence alone does not confirm legitimacy.

Reputation services provide strong negative signals: Gridinsoft assigns a trust score of 0 / 100, and the domain appears on one security blocklist. VirusTotal reports that 16 of 94 scanning engines flagged the site, reinforcing the malicious assessment. The domain has been added to the PhishDestroy blocklist, confirming that security teams have already taken mitigation steps. Registration was performed through Global Domain Group LLC, a registrar often used by abusive actors, further reducing confidence in the domain’s authenticity.

The absence of an SSL certificate, the low trust score, multiple vendor detections, and the explicit impersonation of KuCoin collectively indicate a high likelihood of credential‑harvesting or crypto‑theft activity. Defenders should continue to block the domain at perimeter firewalls, DNS resolvers, and endpoint protection solutions. Monitoring for related domains registered by the same registrar or pointing to the same Cloudflare IP is advisable, as threat actors frequently spin up new sites after takedowns.