# home-kucoinhelps-cdn.tem3.io — MALICIOUS

> home-kucoinhelps-cdn.tem3.io impersonates KuCoin with a crypto drainer kit. VirusTotal flags 17/95 security vendors.

## Summary
PhishDestroy identifies the active domain home-kucoinhelps-cdn.tem3.io as a high-risk crypto drainer impersonating the KuCoin cryptocurrency exchange. This fraudulent site uses social engineering tactics to mimic KuCoin's official login portal, aiming to trick users into entering their credentials or cryptocurrency wallet information. The threat actor leverages a fake CDN subdomain (tem3.io) to host fraudulent content, increasing the likelihood of deception for unsuspecting visitors.  This domain was flagged by 17 out of 95 VirusTotal security vendors and is registered through GoDaddy.com, LLC. It resolves to IP address 188.114.97.3 and was created on August 2, 2024. Google Safe Browsing has classified this domain as a social engineering site, and it carries a high-risk status due to its active use in fraudulent activities. The SSL certificate issued by Google Trust Services adds a false sense of legitimacy, further complicating detection for end users.  As of current intelligence, home-kucoinhelps-cdn.tem3.io remains an active threat with no signs of takedown. Users are strongly advised to verify the authenticity of any KuCoin-related domains using PhishDestroy or official KuCoin channels before interacting with login pages or promotional content. The remaining risk is high, given the domain's recent creation and active use in crypto drainer campaigns. Immediate action is required to prevent credential theft and financial loss.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: KuCoin

## Domain Intelligence
- Registered: 2024-08-02 04:59:28
- Registrar: GoDaddy.com, LLC
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 17 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/90465ae4-f4e1-4813-8d83-a4dc2aaf0717
- PhishDestroy: https://phishdestroy.io/domain/home-kucoinhelps-cdn.tem3.io/
- LLM endpoint: https://phishdestroy.io/domain/home-kucoinhelps-cdn.tem3.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/home-kucoinhelps-cdn.tem3.io/
Last updated: 2026-03-26