caoinbassewillet[.]gitbook[.]io

This domain, caoinbassewillet.gitbook.io, is flagged as a generic phishing site and remains active as of 13 July 2026. Infrastructure analysis shows the hostname resolves to the IP address 172.64.147.209, which is hosted behind Cloudflare, Inc. The domain is using Cloudflare’s DNS service with authoritative nameservers dahlia.ns.cloudflare.com and hugh.ns.cloudflare.com. Registration records indicate the domain was created on 30 March 2014 and has not changed registrant details since then. The presence of Cloudflare suggests the operator is leveraging its CDN and protection services to obscure the true origin of the web server. No additional intelligence such as page content, malware hashes, or victim reports is currently available, leaving the specific phishing payload and target audience uncertain. Defenders should block network connections to the domain and its resolved IP, monitor DNS queries for the associated Cloudflare nameservers, and consider adding the domain to URL filtering and email security policies. Continuous observation is recommended to capture any future changes in hosting, content, or associated indicators of compromise.