main-coine-cnd[.]tem3[.]io

PhishDestroy identifies main-coine-cnd.tem3.io as a high-risk crypto drainer campaign impersonating Coinbase to steal cryptocurrency assets. This domain is currently active and leverages social engineering tactics to trick users into connecting fraudulent wallets or entering credentials, resulting in direct fund loss. The site poses as a legitimate Coinbase service to exploit trust and urgency, a common strategy observed in recent crypto phishing operations. This domain was flagged by 14 out of 95 VirusTotal security vendors, blocked by MetaMask, and listed on one security blocklist. It was registered through GoDaddy.com, LLC on August 2, 2024, and resolves to IP 188.114.97.3. Google’s Safe Browsing service classifies it under SOCIAL_ENGINEERING, indicating deceptive intent. The domain also holds a valid SSL certificate issued by Google Trust Services, which attackers often use to appear legitimate and evade browser warnings. If you visited this site, disconnect your wallet immediately and revoke any connected permissions via your wallet app or Etherscan’s token approval tracker. Do not interact with prompts or enter any credentials. Clear browser cache and scan your device with updated antivirus software. Report the domain to your wallet provider and relevant cybersecurity platforms. Stay alert for similar campaigns leveraging fake Coinbase domains to drain digital assets.