coinbase[.]career[.]pl

Analysis of coinbase.career.pl confirms it as a malicious domain impersonating Coinbase, classified as a crypto scam. The domain was registered on February 21, 2026, through DOMENY.TV MSERWIS Sp. z o.o. and is currently offline.

Infrastructure analysis reveals nameservers ns1.parkingcrew.net and ns2.parkingcrew.net, a hosting pattern commonly associated with low-reputation or disposable domains. Detection data from July 24, 2026, shows 11 of 95 security vendors on VirusTotal flagged the domain, while PhishDestroy has actively blocked it. The domain appears on one security blocklist, and trust scores from Scamadviser and Gridinsoft both indicate maximum risk (1/100 and 0/100, respectively). No evidence of SSL certificate abuse, HTTP redirects, or active content was observed at the time of assessment, as the domain has been taken offline.

The exact content or phishing kit used remains unconfirmed due to the lack of active page analysis. Defenders should treat this domain as a confirmed threat vector for crypto-related fraud, particularly targeting users of the Coinbase brand. Network-level blocking is recommended, and any historical logs containing this domain should be reviewed for potential compromise indicators. Given the domain's registration age and detection history, it is unlikely to be a false positive, though further forensic analysis of its hosting infrastructure may reveal additional compromised assets.