sso-coinbase-x-cdn.tem3[.]io
Category: Phishing And Fraud
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of sso-coinbase-x-cdn.tem3[.]io
This domain appears to host a landing page built on the Tem3 website-building platform while presenting itself as a "Coinbase Pro Login" guide. The page title and on-page text reference cryptocurrency trading, account access, and Coinbase-branded login content, suggesting it is attempting to attract users looking for a Coinbase sign-in or account-management page.
However, the domain name itself does not appear to be an official Coinbase domain. It uses a long subdomain structure under tem3.io and includes brand-related wording such as "sso" and "coinbase," which may be intended to resemble a single sign-on or content-delivery endpoint. The screenshot also shows visible Tem3 platform branding and generic landing-page formatting, which is not typical of a major financial or cryptocurrency platform's official login infrastructure.
Safety Assessment for sso-coinbase-x-cdn.tem3[.]io
Multiple indicators suggest this website may present elevated risk at the time of this scan. It was flagged by 14 out of 91 security engines, categorized by multiple web-classification providers as phishing or fraud-related, and listed in at least one major safe-browsing database for social-engineering activity. A malware scan also reported a malicious threat level, with the domain itself and an associated external endpoint marked as suspicious or malicious.
The domain name closely resembles a well-known e-commerce brand while the page content references a different well-known cryptocurrency platform. That mismatch may indicate look-alike or deceptive branding behavior rather than a legitimate service page. In addition, the site is not ranked among popular domains, has no MX signal noted in the scan context, and uses a templated landing-page builder presentation that may be inconsistent with an official financial login experience.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid TLS certificate issued by a mainstream certificate authority and is served through Cloudflare infrastructure, with hosting resolved to a Cloudflare IP in Canada. The certificate validity and CDN usage may help with transport encryption and delivery performance, but they do not by themselves establish legitimacy. DNSSEC appears to be unsigned, and the domain uses Cloudflare nameservers.
From a security perspective, the scan data shows one flagged file out of 22 scanned, several flagged links, and flagged references to an external ingestion endpoint under tekoapis.com. The page also appears to load multiple JavaScript assets from a landing-builder CDN, which may be consistent with a templated site generator. Combined with phishing-related detections and deceptive branding signals, these technical findings may warrant caution.
Share your experience with this website. Was it safe? Did you encounter any issues?