logencoinbcsepro[.]gitbook[.]io

Domain logencoinbcsepro.gitbook.io is assessed as high-risk brand impersonation targeting Base, presenting a credential theft interface. The observed page title 'Çoinbase Pro Login' indicates cross-brand impersonation and user deception via well-known crypto service login branding. No active drainer kit evidence is explicitly confirmed in current dataset, but the lure pattern aligns with credential harvesting infrastructure.

Technical telemetry shows VirusTotal detection ratio 18/95 security vendors. The domain was registered on February 21, 2026 through Cloudflare, Inc. Infrastructure resolves to IP 104.18.40.47 under AS13335 (Cloudflare, Inc.) with US geolocation. SSL certificate issued by Google Trust Services (WE1). Google Safe Browsing flags the domain as phishing. It appears on 3 security blocklists including PhishDestroy, MetaMask, and SEAL.

Current status indicates the domain is taken offline, reducing live attack surface but preserving forensic value for threat hunting. Despite offline state, residual risk remains due to cached pages, mirrored deployments, or reactivation under similar infrastructure patterns. Recommended response includes blocking resolved IP 104.18.40.47 at proxy/DNS layers, adding indicators (domain, title 'Çoinbase Pro Login') to threat intelligence feeds, and performing retrospective log analysis for credential submission attempts. Users should be warned about impersonation of Base login portals and trained to verify official authentication domains and use phishing-resistant MFA. Continuous monitoring for sibling domains under gitbook.io and Cloudflare-hosted subdomains is advised.