uphoildliogin[.]gitbook[.]io

The domain uphoildliogin.gitbook.io is a generic phishing site designed to deceive users into disclosing sensitive information through social engineering tactics. It does not impersonate a specific brand or employ a known crypto drainer kit. As of the latest verification, uphoildliogin.gitbook.io has been taken offline, but it previously posed an elevated risk of credential theft or other fraudulent activity.

Technical indicators confirm the malicious nature of uphoildliogin.gitbook.io. The domain was flagged by 9 of 95 security vendors on VirusTotal, including ADMINUSLabs, alphaMountain.ai, and Chong Lua Dao. Google Safe Browsing classified it as 'SOCIAL_ENGINEERING,' and it appeared on one security blocklist (PhishDestroy). Registered through Cloudflare, Inc. on February 21, 2026, the domain resolved to the IP address 104.18.40.47, hosted by Cloudflare in the US (AS13335). The SSL certificate was issued by Google Trust Services / WE1, and the site used Cloudflare nameservers (dahlia.ns.cloudflare.com, hugh.ns.cloudflare.com). Gridinsoft assigned it a trust score of 0/100, further indicating its malicious intent.

Users who interacted with uphoildliogin.gitbook.io should immediately change any passwords entered on the site and enable two-factor authentication (2FA) on affected accounts. Monitor financial and online accounts for unauthorized activity. Report the domain to Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in takedown efforts. If the site was accessed via a link in an email or message, report the sender as phishing to the relevant platform.