robnhodlogox[.]gitbook[.]io
robnhodlogox.gitbook.io 피싱 및 보안 점검
“Róbinhood Login | Log in to My Account”
robnhodlogox.gitbook.io — 마지막으로 알려진 활성 (HTTP 307). 브랜드 사칭: Robinhood; 사기 유형: Credential Phishing. 증거 요약: VirusTotal 14/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar); URLQuery 3 alerts; Google Safe Browsing flagged; CF Radar malicious; PhishDestroy score 100/100. 등록기관: GitBook.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
Analysis indicates that robnhodlogox.gitbook.io is an active credential-phishing domain impersonating Robinhood. The domain resolves to 172.64.147.209, a Cloudflare IP address located in California, and is hosted on GitBook infrastructure. The page title, 'Róbinhood Login | Log in to My Account,' closely mimics the legitimate Robinhood login portal, though the exact visual content of the site has not been analyzed. The domain was registered on May 11, 2026, and remains operational as of July 12, 2026. Technical indicators include the use of GitBook, Google Cloud, HSTS, Google Cloud Trace, and HTTP/3. The domain is flagged by Google Safe Browsing for social engineering and has a Gridinsoft trust score of 0/100. It appears on at least one security blocklist, and 18 of 92 security vendors on VirusTotal have flagged the domain. The SSL certificate is issued by Google Trust Services (WE1), and the site returns an HTTP 307 status code, which may be used for temporary redirects. Defenders should treat this domain as high-risk due to its active status, confirmed brand impersonation, and detection by multiple security mechanisms. Network-level blocking of 172.64.147.209 and the domain itself is recommended. Organizations should also monitor for credential submissions or redirects associated with this infrastructure, as the site is designed to harvest login credentials. Further investigation into GitBook-hosted domains with similar naming patterns may reveal additional phishing activity.
네트워크 보안 인텔리전스
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | robnhodlogox.gitbook.io |
malicious | Sinkholed |
| DNS4EU | robnhodlogox.gitbook.io |
malicious | Sinkholed |
| DigiCert UltraDNS | robnhodlogox.gitbook.io |
malicious | Sinkholed |
위협 대응 Pipeline
공개 차단 목록 상태
사용 기술 · 6 identified
GitBook is a command-line tool for creating documentation using Git and Markdown.
www.gitbook.com 신뢰도 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 신뢰도 100%Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.
cloud.google.com 신뢰도 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 신뢰도 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 신뢰도 100%VirusTotal 분석
증거 및 외부 보고서
이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.