cults3d[.]help

This domain, cults3d.help, is identified as a credential theft operation specifically targeting users of the legitimate 3D printing platform Cults3D. Analysis indicates the site mimics the authentic service to harvest login credentials, payment details, or other sensitive information from victims who believe they are interacting with the official platform. The infrastructure shows clear signs of brand impersonation, with visual and structural elements designed to deceive users into entering confidential data. Evidence supporting this assessment includes the domain's creation date of April 14, 2026, registered through NameSilo, LLC, a registrar frequently associated with abusive domains. While VirusTotal currently reports 0/95 detections, the domain appears on three security blocklists, including MetaMask, PhishDestroy, and SEAL, suggesting prior malicious activity. The IP address 178.16.55.171, to which the domain resolves, has been flagged in other investigations for hosting phishing infrastructure. Additionally, the Gridinsoft trust score of 0/100 further corroborates the domain's malicious nature. Users who visited cults3d.help should immediately revoke any sessions or credentials entered on the site. Change passwords for any accounts that may have been exposed, particularly those associated with the legitimate Cults3D platform or financial services. Monitor accounts for unauthorized transactions or suspicious activity, and consider enabling multi-factor authentication where available. If payment details were submitted, contact financial institutions to report potential fraud. Security teams should update blocklists to include this domain and its associated IP address to prevent further access.