welcome-coinbase-logweb.tem3[.]io
Category: Phishing And Fraud
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of welcome-coinbase-logweb.tem3[.]io
The domain welcome-coinbase-logweb.tem3[.]io appears to host a landing page that imitates the branding and layout of Coinbase Pro, a cryptocurrency trading platform. The page title and meta description reference Coinbase and digital asset exchange services, while the screenshot shows Coinbase-themed navigation and trading imagery embedded inside a page built on the Temp3 website-building platform.
Based on the domain structure, this does not appear to be an official Coinbase-owned domain. Instead, it appears to be a subdomain on tem3.io, likely created through a third-party landing-page service. The content and naming pattern suggest the page may be intended to attract users looking for Coinbase login or exchange access, rather than representing an independently branded business or informational site.
Safety Assessment for welcome-coinbase-logweb.tem3[.]io
Multiple indicators suggest elevated risk at the time of this scan. The site was categorized by several web-classification providers as phishing or fraud-related, and 19 out of 91 security engines flagged the URL. Malware scanning also reported a malicious threat level, with the page itself and one referenced external endpoint marked as suspicious or malicious. In addition, one major blacklist source showed the domain as listed for social-engineering activity.
The domain name prominently uses the Coinbase brand while being hosted on a third-party subdomain, and the page screenshot appears to mimic Coinbase Pro branding rather than clearly identifying an unrelated operator. The scan data also notes that the domain closely resembles temu.com, which is another sign of look-alike naming abuse, even though the visible page content references Coinbase instead. That combination of mixed-brand resemblance, phishing classifications, and impersonation-style presentation may indicate an attempt to mislead visitors.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was served over HTTPS with a valid TLS certificate issued by a mainstream certificate authority, and traffic appears to be proxied through Cloudflare infrastructure with an IP located in Canada. The domain uses Cloudflare nameservers and the certificate was valid through mid-2026. However, DNSSEC was not enabled at the time of this scan.
From an infrastructure perspective, the page appears to be hosted as a subdomain under tem3.io and loads assets from multiple tekoapis and landing-builder endpoints. One referenced external endpoint was flagged during malware scanning, and the page itself was also marked suspicious. A valid certificate and CDN-backed hosting can improve transport security, but they do not by themselves establish legitimacy.
Share your experience with this website. Was it safe? Did you encounter any issues?