sso-web-coinnbes-cdnn.tem3[.]io
Category: Phishing And Fraud
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of sso-web-coinnbes-cdnn.tem3[.]io
This domain appears to host a landing page built on the Tem3 website-building platform rather than an official standalone service. The visible page content uses Coinbase branding and references "Coinbase Pro" and digital-asset trading, while the page title and meta description also present it as a cryptocurrency exchange login or promotional page. Based on the domain structure, this is a subdomain under tem3.io rather than an official Coinbase-owned domain.
There are also mixed branding signals. The hostname contains a string resembling "coinnbes" and separately resembles a close spelling variant of temu.com, while the page itself visually presents Coinbase-themed content. That combination may indicate a disposable or deceptive landing page rather than a legitimate branded property. Based on the available metadata and screenshot, the site appears to be a cryptocurrency-themed page hosted through a third-party landing-page infrastructure.
Safety Assessment for sso-web-coinnbes-cdnn.tem3[.]io
Multiple risk indicators were present at the time of this scan. The domain was categorized by several web-classification providers as phishing or fraud-related, and 19 out of 91 security engines flagged it. Malware scanning also indicated malicious or suspicious content, with one flagged object on the page and an external referenced endpoint marked as potentially malicious. In addition, the domain was listed in at least one major blacklist database for social-engineering activity at the time of review.
The domain name itself closely resembles temu.com while the page content visually imitates Coinbase branding, which may indicate a look-alike setup intended to confuse visitors. That mismatch between the hostname, the displayed brand, and the hosting platform is a notable warning sign. The site also has no Tranco ranking and appears to rely on a landing-page builder environment, which can sometimes be used for short-lived phishing campaigns.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was served through Cloudflare infrastructure with a valid TLS certificate issued by Google Trust Services, expiring in June 2026. The resolved IP was associated with Cloudflare in Toronto, Canada, and the domain uses Cloudflare nameservers. DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from that additional integrity layer.
From a security perspective, the presence of a valid certificate should not be treated as proof of legitimacy. The scan data showed suspicious or malicious detections tied to the page itself and to an external ingestion endpoint under tekoapis.com. The domain is relatively new, not broadly ranked, and appears to be hosted on shared landing-page infrastructure, all of which may increase uncertainty when combined with the phishing-related detections.
Share your experience with this website. Was it safe? Did you encounter any issues?