coinbase-log-app[.]tem3[.]io

The domain coinbase-log-app.tem3.io has been identified as a confirmed phishing site, specifically a brand impersonation targeting Coinbase. This domain is currently offline, but its recent activity posed a significant threat to users. The site was designed to mimic Coinbase's login page, tricking visitors into entering their credentials and potentially draining their cryptocurrency wallets.

Analysis of this domain reveals multiple red flags. VirusTotal flagged it as malicious by 16 out of 95 security vendors, indicating widespread recognition of its threat. It appeared on three security blocklists, and Google Safe Browsing specifically flagged it for phishing. The domain was registered through GoDaddy.com, LLC on May 6, 2026, and resolved to IP address 188.114.97.3. The SSL certificate was issued by Google Trust Services, which is common for legitimate sites but was here abused for fraudulent purposes. The page title, "Login Security - Coinbase®," was crafted to deceive users into believing they were on an official Coinbase security page.

Although the domain is now offline, users should remain vigilant. Anyone who may have interacted with this site should immediately change their Coinbase passwords and enable two-factor authentication. PhishDestroy advises all users to verify any Coinbase-related URLs through official channels and to avoid clicking on links in unsolicited messages. Regular monitoring of accounts for unauthorized activity is also recommended.