coinbccseprologm[.]gitbook[.]io

The domain coinbccseprologm.gitbook.io is currently active and poses a high-risk threat of brand impersonation, specifically targeting Coinbase. The domain impersonates the legitimate Coinbase Pro login page, which can lead to significant financial and personal data loss for unsuspecting users.

Infrastructure analysis reveals that this domain is registered through Cloudflare, Inc., and resolves to the IP address 172.64.147.209, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The domain was created on February 21, 2026, and is protected by an SSL certificate issued by Google Trust Services / WE1. Analysis indicates that the domain has been flagged by 18 out of 95 security vendors on VirusTotal, and it appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. Additionally, Google Safe Browsing has identified this domain as a phishing site, further corroborating the high-risk assessment.

Given the current active status and the high number of security flags, it is imperative that users and organizations exercise extreme caution when encountering this domain. Recommendations include updating security blocklists to include coinbccseprologm.gitbook.io, educating users about the signs of brand impersonation, and implementing multi-factor authentication for all accounts. Security teams should monitor for any related activity and consider reporting the domain to Cloudflare and relevant authorities for potential takedown.