auth-coinbse-sso.tem3[.]io
Category: Phishing And Fraud
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of auth-coinbse-sso.tem3[.]io
The domain auth-coinbse-sso.tem3[.]io appears to be a landing page hosted on a site-building platform subdomain rather than an official standalone corporate domain. Based on the page title, visible branding, and metadata, it presents itself as a Coinbase Pro login or account-access page related to cryptocurrency trading. The screenshot shows Coinbase-themed visuals, login-oriented wording, and exchange-related marketing language intended to resemble a financial platform sign-in experience.
However, the hostname structure and branding cues do not appear consistent with an official Coinbase web property. The subdomain includes a misspelled brand reference ("coinbse") and is hosted under tem3.io, which appears to be associated with a third-party landing-page or website builder service. This suggests the page may have been created to imitate a recognizable cryptocurrency brand rather than serve as an official customer portal.
Safety Assessment for auth-coinbse-sso.tem3[.]io
This website was flagged by 18 out of 91 security engines at the time of this scan, and multiple web-classification providers categorized it as phishing or fraud-related. Malware scanning also indicated suspicious or malicious elements, with one scanned file flagged and several links and referenced domains marked as suspicious. In addition, the domain was listed in blacklist data related to social-engineering activity at the time of review.
There are also strong contextual warning signs in the domain itself. The page uses Coinbase branding while operating from a third-party subdomain, and the hostname contains a misspelled version of the brand name. The page title references Coinbase Pro login, yet the domain closely resembles a different well-known commercial domain and may be a look-alike intended to confuse visitors. Combined with the lack of ranking, no MX signal, and the use of a generic landing-page platform, this pattern is commonly associated with credential-harvesting or impersonation campaigns.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority and is fronted by Cloudflare infrastructure, with the server resolving to a Cloudflare IP in Canada at the time of this scan. Nameservers also point to Cloudflare, and the domain's DNSSEC status appears unsigned. A valid certificate indicates encrypted transport, but it does not by itself verify that the site is legitimate.
From a technical perspective, the domain is hosted as a subdomain under tem3.io and appears to load assets from multiple tekoapis-related endpoints and common CDN services. Security scanning flagged the page itself, several internal URLs, and an external ingestion endpoint as suspicious or malicious at the time of analysis. The combination of brand-themed content on a third-party hosted subdomain, unsigned DNSSEC, and multiple scan detections raises notable security concerns.
Share your experience with this website. Was it safe? Did you encounter any issues?