robnhooidloign[.]gitbook[.]io

The domain robnhooidloign.gitbook.io is an active phishing site specifically designed to impersonate the Robinhood brand. This threat falls under the category of brand impersonation, where cybercriminals create a fraudulent login page to steal user credentials. The page title, "Róbinhood Login | Log in to My Account," uses a deceptive accented character to visually mimic the legitimate Robinhood login portal, tricking users into entering their sensitive information. The domain is currently active and poses a significant risk to anyone who may encounter it through phishing emails, social media, or search engine results.

Technical analysis reveals several red flags. The domain was registered through Cloudflare, Inc. on February 21, 2026, a very recent date that suggests it was created specifically for malicious purposes. It resolves to the IP address 172.64.147.209 and uses an SSL certificate issued by Google Trust Services, which gives it a false sense of security. VirusTotal data shows that 15 out of 95 security vendors flag this domain as malicious, indicating broad recognition by the cybersecurity community. Additionally, it appears on one security blocklist, and its trust scores are extremely low, confirming its dangerous nature.

Given the elevated risk level and active status, users are strongly advised to avoid interacting with this domain under any circumstances. PhishDestroy recommends that anyone who has entered credentials on this site immediately change their Robinhood password and enable two-factor authentication. To stay safe, always verify the legitimacy of any login page by checking the official Robinhood website directly. For further analysis and real-time threat intelligence, visit PhishDestroy and search for the domain robnhooidloign.gitbook.io.