coibase-pro-auth-star-en.tem3[.]io
Category: Phishing And Fraud
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of coibase-pro-auth-star-en.tem3[.]io
This domain appears to host a cryptocurrency-themed landing page that presents itself as a Coinbase-related login or wallet page. The page metadata references "Home | Official Site - Coinbase Pro®" and a sign-in flow for managing a cryptocurrency portfolio, while the screenshot shows Coinbase branding and wallet-related promotional content.
At the same time, the page also appears to be built on a third-party landing-page platform under the tem3.io infrastructure, with visible builder branding in the screenshot. Based on the domain structure and page presentation, this does not appear to be an official primary Coinbase domain. The content may be intended to imitate a cryptocurrency service login or promotional page rather than represent an independently branded business website.
A domain similarity check also indicates that the hostname closely resembles temu.com in spelling, while the visible page content references Coinbase. That mismatch between the domain name pattern and the displayed branding may indicate a look-alike or deceptive setup designed to attract traffic through confusing naming and copied branding.
Safety Assessment for coibase-pro-auth-star-en.tem3[.]io
Multiple risk indicators were present at the time of this scan. The site was categorized by multiple web-classification providers as phishing or fraud-related, and 20 out of 91 security engines flagged the URL. Malware scanning also indicated malicious findings, with one scanned file flagged and several on-page links and referenced domains marked as suspicious. In addition, the domain appears on blacklist databases associated with social-engineering or suspicious-object activity.
The page content raises further concerns because it displays Coinbase branding and claims to be an official Coinbase Pro-related page, yet it is hosted on a subdomain of tem3.io rather than an official Coinbase-owned domain. The domain also closely resembles temu.com in spelling, which may indicate a look-alike setup. This combination of mismatched branding, look-alike naming, and phishing-related detections is commonly associated with credential-harvesting or other deceptive activity.
Although scan results are point-in-time and can change, the available evidence is strongly unfavorable. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid TLS certificate issued by a mainstream certificate authority, fronted by Cloudflare infrastructure and resolving to a Cloudflare IP in Canada. The domain uses Cloudflare nameservers and the web server appears to be behind Cloudflare, which can obscure origin hosting details. DNSSEC was not enabled at the time of this scan.
From a technical-risk perspective, the presence of valid HTTPS should not be interpreted as legitimacy. The scan data shows malicious or suspicious references involving the page itself and an external telemetry-related domain, and the screenshot suggests the page may have been assembled using a landing-page builder rather than a dedicated production environment. The domain had no Tranco ranking and additional signals noted no MX records, which may be consistent with a disposable or campaign-style deployment.
Share your experience with this website. Was it safe? Did you encounter any issues?