coinbcaseprologin[.]gitbook[.]io

Analysis indicates that the domain coinbcaseprologin.gitbook.io is an active credential-phishing site targeting users of a cryptocurrency exchange platform. The page title, 'Çoinbase Pro Login | Sign In,' explicitly mimics the branding of a well-known exchange, suggesting intent to deceive visitors into submitting login credentials. Infrastructure analysis reveals the domain is hosted on Cloudflare infrastructure, resolving to the IP address 104.18.40.47, and was registered through Cloudflare, Inc. on March 30, 2014. While the domain's age may appear legitimate, its use in this campaign is recent, as evidenced by security vendor detections. As of July 12, 2026, the domain is flagged by Google Safe Browsing for social engineering and holds a Gridinsoft trust score of 0/100. Fifteen out of ninety-five security vendors on VirusTotal have detected the domain as malicious, and it appears on three security blocklists, including SEAL and PhishDestroy. The SSL certificate is issued by Google Trust Services, which does not inherently validate the site's legitimacy. The domain remains active, and defenders should treat it as a high-risk credential-harvesting endpoint. No evidence currently links this domain to a broader phishing kit or campaign infrastructure. The exact content and functionality of the site have not been analyzed, but the combination of brand impersonation, security vendor detections, and blocklist presence confirms its malicious intent. Network defenders are advised to block access to this domain and monitor for related indicators of compromise.