app-kaspa[.]net

Analysis indicates that app-kaspa.net is an active phishing domain targeting users of the Kaspa cryptocurrency wallet. The domain was registered on June 8, 2026, through Tucows Domains Inc. and resolves to IP address 216.198.79.1. The page title, 'Kaspa Wallet | A New Digital Wallet Experience,' suggests an attempt to impersonate legitimate Kaspa wallet services. As of July 12, 2026, the domain is flagged by 16 of 95 security vendors on VirusTotal and appears in 16 threat intelligence pulses on AlienVault OTX. It is currently blocked by at least four security blocklists, including SEAL, MetaMask, PhishDestroy, and BLP-Malware, and holds a trust score of 0/100 from Gridinsoft. The SSL certificate is issued by Let's Encrypt, which is commonly used by both legitimate and malicious sites. Infrastructure analysis reveals no additional details about the hosting provider or autonomous system number. Defenders should treat this domain as high-risk and prioritize blocking it at the network and endpoint levels. Given the domain's recent registration and consistent detection across multiple security sources, it is likely part of an ongoing phishing campaign. No evidence of a specific phishing kit or additional malicious payloads has been confirmed at this time.