upihlodlognim[.]gitbook[.]io

This domain is flagged as a high-risk credential theft operation specifically targeting Uphold users. Analysis of the page title, 'Ûphold Login,' indicates an attempt to impersonate the legitimate Uphold platform to deceive users into submitting their login credentials. The domain poses a significant threat due to its clear focus on stealing sensitive account information, which can lead to unauthorized access and financial loss. Infrastructure analysis reveals multiple indicators of malicious activity. The domain was created on April 11, 2026, and is registered through Cloudflare, Inc. It resolves to the IP address 104.18.40.47 and is detected by 15 out of 95 security vendors on VirusTotal. The domain appears on three security blocklists and has trust scores of 1/100 from Scamadviser and 0/100 from Gridinsoft. Technologies detected include GitBook, Google Cloud, HSTS, Google Cloud Trace, Cloudflare, and HTTP/3, with an SSL certificate issued by Google Trust Services. The domain is currently offline, but its prior activity remains a concern. Users who may have interacted with this domain should immediately revoke any active sessions on their Uphold accounts and enable multi-factor authentication if not already in place. Monitor account activity for unauthorized transactions and report any suspicious logins to the platform’s support team. Avoid entering credentials on any site that does not use the official Uphold domain (uphold.com) and verify the SSL certificate issuer before submitting sensitive information. Organizations should update blocklists to include this domain and its associated IP address to prevent future access.