upholdlogin-5[.]gitbook[.]io

PhishDestroy identifies upholdlogin-5.gitbook.io as an active credential phishing site masquerading as a legitimate Uphold login page. This domain employs deceptive tactics to trick users into entering their Uphold credentials, which are then harvested by attackers. The page closely mimics Uphold's official login interface, increasing the risk of successful account takeovers and financial theft. This domain was flagged by 9 out of 95 VirusTotal security vendors, and Google Safe Browsing has labeled it as SOCIAL_ENGINEERING. Registered through Cloudflare, Inc, the domain upholdlogin-5.gitbook.io was created on March 30, 2014, and currently resolves to the IP address 104.18.40.47. The presence of a Google Trust Services SSL certificate is a tactic used to lend false legitimacy to the site, as phishing pages often use valid SSL certificates to appear trustworthy. If you visited this site, do not enter any credentials or personal information. Immediately change your Uphold password from a different device, and enable two-factor authentication if you haven’t already. Check your account for any unauthorized transactions or changes. Use phishing-resistant security tools like password managers with built-in phishing detection, and report the domain to Google Safe Browsing to help protect others. Monitor your financial accounts closely for signs of fraud, as credential phishing can lead to direct financial losses.