coinbcveprologix[.]gitbook[.]io

The domain coinbcveprologix.gitbook.io was registered on February 21 2026 through Cloudflare, Inc. It resolves to the IP address 172.64.147.209, which belongs to AS13335 (Cloudflare). The site is fronted by Cloudflare and supports HTTP/3. The TLS certificate is issued by Google Trust Services under the WE1 name, and the server returns HTTP 403 for direct requests. Google Safe Browsing classifies the domain as a social engineering threat, and the domain appears on two public blocklists (PhishDestroy, PhishingDB). VirusTotal scans show 15 of 93 security vendors flag the domain, contributing to a Gridinsoft trust score of 0/100. The domain is currently marked as active. While the exact payload or lure has not been publicly disclosed, the presence of a social‑engineering flag and multiple vendor detections indicate a high likelihood that the domain is being used for credential‑stealing or fraudulent activities. Defenders should block network connections to the domain and its resolved IP, monitor for any outbound requests to the host, and consider adding the domain to internal URL filtering lists. Continuous monitoring for changes in DNS resolution or additional detections is recommended, as the infrastructure may be leveraged for new campaigns.