coin-base-pro-cdn.tem3[.]io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of coin-base-pro-cdn.tem3[.]io
The domain coin-base-pro-cdn.tem3[.]io appears to host a page themed around Coinbase and cryptocurrency account access. Its page title and metadata reference "Coinbase Pro Login" and crypto trading, while the screenshot shows Coinbase branding and wallet-related promotional content. At the same time, the page is served from a subdomain of tem3.io rather than an official Coinbase-owned domain, which is an important contextual detail.
Based on the visible content, this appears to be a landing-page-style site built on a third-party website builder platform. The screenshot includes builder branding and promotional text for the Tem3 platform, suggesting the page may have been assembled using a template or hosted through a generic site-building service rather than operated directly by the brand it references.
The domain structure also closely resembles a well-known e-commerce platform's domain while the page content references a different major cryptocurrency brand. That mismatch may indicate an attempt to blend recognizable names in a way that could confuse visitors about who operates the site.
Safety Assessment for coin-base-pro-cdn.tem3[.]io
This domain was flagged by 16 out of 91 security engines at the time of the scan, with detections broadly indicating phishing or other malicious behavior. Malware scanning also reported a malicious threat level and identified flagged objects associated with the domain itself and an external ingestion endpoint. In addition, blacklist data showed listings related to social-engineering or suspicious-object classifications at the time of review.
There are also strong contextual warning signs beyond the raw detections. The domain uses Coinbase-related wording in the hostname and page content, but it is not on an official Coinbase domain. Separately, the domain closely resembles temu.com in spelling and may be a look-alike, even though the page presents cryptocurrency branding instead of Temu branding. That combination of brand-referencing language, misleading naming patterns, lack of ranking, and multiple phishing-oriented detections materially increases concern.
The screenshot further suggests the page may be imitating Coinbase branding while being hosted on a third-party builder subdomain, which is not typical for a legitimate financial platform login or wallet portal. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid TLS certificate issued by a mainstream certificate authority, and traffic appears to be proxied through Cloudflare infrastructure with an IP in Canada. The domain uses Cloudflare nameservers, while DNSSEC appears to be unsigned. A valid certificate and CDN protection can improve transport security, but they do not by themselves establish legitimacy.
From an infrastructure perspective, the domain is a subdomain under tem3.io and appears to rely on third-party assets and builder-related resources, including multiple tekoapis.com endpoints. The scan also noted flagged links and domains associated with the page, and the domain had no Tranco ranking and no MX signal in the supplied context. Those factors, combined with phishing-oriented detections and brand-mismatched presentation, may indicate elevated abuse risk at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?