home-kucoinhelps-cdn[.]tem3[.]io

PhishDestroy identifies the active domain home-kucoinhelps-cdn.tem3.io as a high-risk crypto drainer impersonating the KuCoin cryptocurrency exchange. This fraudulent site uses social engineering tactics to mimic KuCoin's official login portal, aiming to trick users into entering their credentials or cryptocurrency wallet information. The threat actor leverages a fake CDN subdomain (tem3.io) to host fraudulent content, increasing the likelihood of deception for unsuspecting visitors. This domain was flagged by 17 out of 95 VirusTotal security vendors and is registered through GoDaddy.com, LLC. It resolves to IP address 188.114.97.3 and was created on August 2, 2024. Google Safe Browsing has classified this domain as a social engineering site, and it carries a high-risk status due to its active use in fraudulent activities. The SSL certificate issued by Google Trust Services adds a false sense of legitimacy, further complicating detection for end users. As of current intelligence, home-kucoinhelps-cdn.tem3.io remains an active threat with no signs of takedown. Users are strongly advised to verify the authenticity of any KuCoin-related domains using PhishDestroy or official KuCoin channels before interacting with login pages or promotional content. The remaining risk is high, given the domain's recent creation and active use in crypto drainer campaigns. Immediate action is required to prevent credential theft and financial loss.