KuCoin

Crypto & web3 Seychelleskucoin.comRank 242 of the most impersonated
Cert findings · 24 h
2
Cert findings · 7 days
8
3 reported or listed · 1 on phishing hosts · 4 on Spamhaus DROP
Registered lookalikes
152
16 listed by a source or an address list
Official domains
11
verified from KuCoin's own sites and records

Certificate findings for KuCoin

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to KuCoin's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 9 findings, grouped by hostname

  1. kucoin.cm NL · AS60781 · LEASEWEB-NL-AMS-01 LeaseWeb…2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 9 y ago
    DetailsHide
    Hostname
    kucoin.cm
    First seen
    2026-11-05 09:05 UTC
    First published
    2026-10-28 08:43 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 212.7.194.71.
    1. Phishing-host list fetched with the address
    2. Resolved to 212.7.194.71
    Brand
    KuCoin
    Addresses
    212.7.194.71 · Netherlands · AS60781 LEASEWEB-NL-AMS-01 LeaseWeb Netherlands B.V.
    69.162.80.61 · United States · AS46475 LIMESTONENETWORKS - Limestone Networks, Inc.
    Domain
    kucoin.cm
    Registered
    2017-10-28 · Netcom.cm Sarl
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  2. 442094-kucoin.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    442094-kucoin.com
    First seen
    2026-11-05 06:56 UTC
    First published
    2026-11-05 07:32 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 07:44 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-09-07 00:53 UTC to 2026-12-06 01:51 UTC
    Logged 2026-11-05 06:54 UTC in DigiCert Wyvern2026h2, entry 2,205,365,064
    SHA-256 7dba22f1ae2e1a7b58bb2be23ca7240dc1f013a0a98e2750e8e6183db635dfcf
    Public key SHA-256 3641e246739c7c24af82b1465e5861fce57c94c26cf4d159cf14078ad9ba375d
    Brand
    KuCoin
    Addresses
    104.21.36.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:beb0
    2606:4700:3031::6815:2456
    Cloudflare
    Cloudflare (104.21.36.86, 172.67.190.176): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    442094-kucoin.com
    Registered
    2026-07-09 · CNOBIN INFORMATION TECHNOLOGY LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 07:32 UTC

    Suggest a correction

  3. wallets-kucoin.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    wallets-kucoin.com
    First seen
    2026-11-03 17:05 UTC
    First published
    2026-11-03 18:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:20 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-03 16:02 UTC to 2027-02-01 17:00 UTC
    Logged 2026-11-03 17:02 UTC in Google ParcelYard2027h1, entry 593,692,228
    SHA-256 108956741a81a40a47279ca619e360185ede5f964f53e58df68a06e508f1f7c8
    Public key SHA-256 cda2a6a7f9e0f3b0d98786fae4722f0b8961271c90fa648c1a1028ead217e053
    Brand
    KuCoin
    Addresses
    104.21.58.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:a45b
    2606:4700:3035::6815:3aca
    Cloudflare
    Cloudflare (104.21.58.202, 172.67.164.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    wallets-kucoin.com
    Registered
    2026-07-08 · CNOBIN INFORMATION TECHNOLOGY LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 18:19 UTC

    Suggest a correction

  4. admin.kucoinus.my HK · AS152194 · CTG Server Limited
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    admin.kucoinus.my
    First seen
    2026-11-03 16:31 UTC
    First published
    2026-11-03 16:45 UTC
    DNS
    Resolves · checked 2026-11-04 16:55 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 118.107.31.153.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 118.107.31.153
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-03 15:27 UTC to 2027-02-01 15:27 UTC
    Logged 2026-11-03 16:26 UTC in Google PlumbersArms2027h1, entry 593,677,054
    SHA-256 bd29bb9d1e63656d7def5b0a8d770f8f96e6cc4f6b42fde1e71afb02f89874e3
    Public key SHA-256 0b94b04c875585ae537333d6c89daabf88c64a24d3ceb54684b1c749ff12ca92
    Brand
    KuCoin
    Addresses
    118.107.31.153 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    Domain
    kucoinus.my
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  5. www.kucoinus.my HK · AS152194 · CTG Server Limited
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.kucoinus.my
    First seen
    2026-11-03 16:27 UTC
    First published
    2026-11-03 16:45 UTC
    DNS
    Resolves · checked 2026-11-04 16:55 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 118.107.31.153.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 118.107.31.153
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-03 15:23 UTC to 2027-02-01 15:23 UTC
    Logged 2026-11-03 16:21 UTC in Google PlumbersArms2027h1, entry 593,619,691
    SHA-256 88bc1d0e3a462db3b515eac337c88e835bfe5263bed77f0b97227bf874f36e58
    Public key SHA-256 0a76a3c86406a1929ea24da8acf886c3fb9b9e7a4e267298135f51168adb9780
    Brand
    KuCoin
    Addresses
    118.107.31.153 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    Domain
    kucoinus.my
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  6. webapi.kucoinus.my HK · AS152194 · CTG Server Limited
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    webapi.kucoinus.my
    First seen
    2026-11-03 16:27 UTC
    First published
    2026-11-03 16:45 UTC
    DNS
    Resolves · checked 2026-11-04 16:55 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 118.107.31.153.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 118.107.31.153
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-03 15:24 UTC to 2027-02-01 15:24 UTC
    Logged 2026-11-03 16:22 UTC in IPng Networks Gouda2027h1, entry 304,522,771
    SHA-256 0dfd6b2781af61ad5d9538909e8d9e23a964f6e262ceaef15a0b6fb48f190866
    Public key SHA-256 1ea7772a95ffe51a1f8cc9182199b2bca6d64d462674ff34d5d597fe0bf69338
    Brand
    KuCoin
    Addresses
    118.107.31.153 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    Domain
    kucoinus.my
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  7. adminapi.kucoinus.my HK · AS152194 · CTG Server Limited
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    adminapi.kucoinus.my
    First seen
    2026-11-03 16:26 UTC
    First published
    2026-11-03 16:45 UTC
    DNS
    Resolves · checked 2026-11-04 16:55 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 118.107.31.153.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 118.107.31.153
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-03 15:26 UTC to 2027-02-01 15:26 UTC
    Logged 2026-11-03 16:25 UTC in DigiCert Wyvern2027h1, entry 390,677,609
    SHA-256 5a4b9ce5a170d766c13f6e029b32581e812ad2b4fa7fd91e9e1f33362bb6ae0e
    Public key SHA-256 1499a5d38adaa0fc1c581a420fbaa77c5719eb8e4ed290611e71ac9c4ca6472a
    Brand
    KuCoin
    Addresses
    118.107.31.153 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
    Domain
    kucoinus.my
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  8. kucoin-faq.com US · AS16509 · Amazon.com, Inc.
    ListedAmazon Web ServicesListed by MetaMaskMX absentSPF missingDMARC missingRegistered 13 mo ago
    DetailsHide
    Hostname
    kucoin-faq.com
    First seen
    2026-10-31 05:44 UTC
    First published
    2026-10-31 06:08 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-31 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 06:11 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by GoDaddy TLS Intermediate CA DV - R1v1 · precertificate
    Valid 2026-10-30 16:55 UTC to 2027-05-16 16:55 UTC
    Logged 2026-10-30 16:55 UTC in Sectigo Elephant2027h1, entry 639,749,653
    SHA-256 dddb8b38a4585e71206be392e82b6d3e99d75f543f7cd17588a035f3bff7b291
    Public key SHA-256 d1e444540cc79b5d7ca27aecb4ee2fa5cfec852de7321983d452e789bdcb0b04
    Brand
    KuCoin
    Addresses
    52.223.13.41 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (52.223.13.41): a cloud provider. It rents servers and addresses to its customers.
    Domain
    kucoin-faq.com
    Registered
    2025-10-25 · Tucows Domains Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  9. kucoin9.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    kucoin9.com
    First seen
    2026-10-28 11:36 UTC
    First published
    2026-10-28 11:58 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 12:09 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-08-30 10:14 UTC to 2026-11-28 11:13 UTC
    Logged 2026-10-28 11:33 UTC in DigiCert Wyvern2026h2, entry 2,189,282,042
    SHA-256 f5da556c8080af60cfd5ef2d9b944f787f631893e674cada4e8ecb2487cae22d
    Public key SHA-256 8f5624799b3e717a31b21016237b83ab06868b1fda9a7eccbcbd7779bda8540a
    PhishDestroy
    Brand
    KuCoin
    Addresses
    104.21.75.132 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.177.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:4b84
    2606:4700:3035::ac43:b148
    Cloudflare
    Cloudflare (104.21.75.132, 172.67.177.72): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    kucoin9.com
    Registered
    2026-08-30 · Cloudflare, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:35 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches KuCoin when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Crypto & web3

All brands →