robinhood-loginp[.]gitbook[.]io

This domain, robinhood-loginp.gitbook.io, poses a direct threat as a credential-harvesting portal impersonating the Robinhood financial platform. Analysis indicates the page displays a fraudulent login interface titled 'Róbinhood Login - Login To My Account,' designed to deceive users into submitting account credentials. The threat specifically targets individuals attempting to access Robinhood services, increasing the likelihood of successful credential theft due to the domain's plausible appearance and branding mimicry.

Infrastructure analysis reveals the domain was registered on March 06, 2026, through Cloudflare, Inc., and resolves to the IP address 104.18.40.47 (AS13335). It is currently flagged by 18 out of 95 security vendors on VirusTotal, and appears on one security blocklist. The SSL certificate is issued by Google Trust Services (WE1), which, while legitimate, does not mitigate the domain's malicious intent. The domain's creation date is anomalous, suggesting potential typosquatting or preemptive registration for future abuse.

Users who visited robinhood-loginp.gitbook.io should immediately revoke any entered credentials and enable multi-factor authentication on their Robinhood accounts. Monitor financial transactions for unauthorized activity and report the incident to the platform's security team. Avoid interacting with any links or prompts from this domain, and verify the legitimacy of future login portals by cross-referencing official domain listings provided by Robinhood.