learn-coinbasecom-sign.tem3[.]io
Category: Phishing And Fraud
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of learn-coinbasecom-sign.tem3[.]io
The domain learn-coinbasecom-sign.tem3[.]io appears to host a landing page that imitates Coinbase branding and messaging, including a page title referencing "Coinbase.com - Sign In | Coinbase Help" and homepage text about buying, selling, and using cryptocurrency. The screenshot shows Coinbase-style visuals and navigation, but the site is served from a subdomain of tem3.io rather than an official Coinbase-owned domain, which is a notable mismatch.
Based on the page structure and visible footer/header elements, the content also appears to be built through a third-party landing-page platform associated with Tem3/Teko infrastructure. This suggests the page may not be an official Coinbase property, but rather a custom-built promotional or credential-harvesting page designed to resemble a legitimate cryptocurrency service.
The domain itself also closely resembles a well-known brand name while combining terms such as "learn," "coinbasecom," and "sign," which may indicate an attempt to attract users looking for Coinbase login or help pages.
Safety Assessment for learn-coinbasecom-sign.tem3[.]io
Multiple indicators suggest elevated risk at the time of this scan. The site was categorized as phishing/fraud by web-classification data, detected by 13 out of 91 security engines, and listed in at least one major blacklist database for social-engineering activity. A malware scan also reported a malicious threat level and flagged both the scanned domain and an associated external endpoint.
The domain name and page presentation raise additional concerns. Although the page presents itself as Coinbase-related, it is hosted on a tem3.io subdomain rather than an official Coinbase domain. The page also closely resembles temu.com in its host structure, which may indicate a look-alike naming pattern, while the visible content imitates Coinbase branding and sign-in messaging. This combination of brand-themed wording, third-party hosting, and phishing detections is commonly associated with deceptive login or lead-capture pages.
The site has no Tranco ranking, was reported with additional red flags such as no MX records, and references external infrastructure that was itself flagged during scanning. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid TLS certificate issued by a mainstream certificate authority and is fronted by Cloudflare infrastructure, with Cloudflare nameservers and an IP range associated with that provider. While HTTPS is present, a valid certificate only indicates encrypted transport and does not by itself establish legitimacy. DNSSEC appears to be unsigned, which means DNS responses may have fewer authenticity protections than a signed domain.
The domain was created in 2024 and is relatively new, with no observed Tranco ranking. Hosting on a landing-page platform and loading assets from multiple Teko/Tem3-related subdomains may be consistent with a templated campaign page. Security concerns in this scan include phishing classifications, blacklist presence, and a flagged external endpoint tied to the page.
Share your experience with this website. Was it safe? Did you encounter any issues?