docs-help-krrakenn-cdnn[.]tem3[.]io

PhishDestroy identifies docs-help-krrakenn-cdnn.tem3.io as a high-risk generic phishing domain currently active in the wild. Threat actors are abusing this domain to impersonate legitimate support pages, luring users into surrendering sensitive credentials or installing malicious payloads under the guise of technical assistance.

This domain (registered August 2, 2024 via GoDaddy.com, LLC) resolves to IP 188.114.96.3 and has been confirmed malicious by 15 of 95 VirusTotal security vendors. It is currently blocked by MetaMask and listed on 1 security blocklist. Despite leveraging a Google Trust Services SSL certificate, Google Safe Browsing has flagged it under the SOCIAL_ENGINEERING category, indicating active abuse in credential harvesting campaigns.

Organizations and individuals should treat this domain as hostile. Never interact with links or downloads from docs-help-krrakenn-cdnn.tem3.io. Users should verify the legitimacy of support pages by visiting official websites directly, enabling enhanced phishing detection in browsers and security tools, and reporting suspicious domains to their IT/security teams or threat intelligence platforms. Immediate network-level blocking of the IP 188.114.96.3 and domain is strongly advised to prevent further compromise.