uiopholdlogio[.]gitbook[.]io

This domain, uiopholdlogio.gitbook.io, is identified as a phishing site specifically impersonating GitBook, a documentation hosting platform. The threat type involves brand impersonation designed to deceive users into entering credentials or sensitive information under the guise of legitimate GitBook services. As of the latest assessment, the domain has been taken offline, though prior activity remains under investigation. Analysis indicates the domain was registered on March 30, 2014, through Cloudflare, Inc., and resolves to the IP address 172.64.147.209, hosted on AS13335 (Cloudflare, Inc.). Security vendors on VirusTotal flagged the domain, with 19 out of 95 engines detecting malicious activity. The domain appears on one security blocklist and is confirmed as phishing by Google Safe Browsing. The SSL certificate is issued by Google Trust Services (WE1), a common attribute in both legitimate and malicious infrastructure leveraging Cloudflare’s services. The domain’s current status is offline, reducing immediate risk to users. However, historical activity and infrastructure reuse remain a concern. Organizations are advised to block the domain and associated IP (172.64.147.209) at the perimeter. Security teams should monitor for related subdomains or similar impersonation attempts targeting GitBook or other documentation platforms. End-users should be educated on verifying domain authenticity before entering credentials, particularly when redirected from unexpected sources.