coinbasa[.]pl

This domain, coinbasa.pl, is confirmed to be a high-risk phishing site. It impersonates a legitimate cryptocurrency platform, likely aiming to steal user credentials or financial information. No specific brand or drainer kit has been identified, but the domain's infrastructure and blocklist appearances suggest it is actively used for malicious purposes.

Analysis of the domain reveals several critical technical indicators. On VirusTotal, 2 out of 95 security vendors flag the domain as malicious, indicating a moderate level of detection. The domain is registered through Aftermarket.pl Limited and resolves to the IP address 185.253.212.22. It was created on May 21, 2026, and currently appears on 3 security blocklists. The SSL certificate is issued by Let's Encrypt, which is a common practice among phishing sites to appear more legitimate.

The domain remains active and poses a significant ongoing risk. It has been blocked by PhishDestroy, MetaMask, and SEAL, but the low detection rate on VirusTotal suggests that not all security systems are aware of its threat. Users are advised to avoid accessing this domain and to report any suspicious activity to their security teams. Continued monitoring and potential blacklisting by additional vendors are recommended to mitigate the risk.