uphald-logun[.]gitbook[.]io

This domain presents a fraudulent login page mimicking Uphold, a legitimate cryptocurrency platform. Visitors are prompted to enter their credentials, which are then captured by attackers for unauthorized account access, financial theft, or further exploitation. The site specifically targets users expecting to log in to Uphold, making it a high-risk credential harvesting operation. Analysis indicates the domain was registered on March 29, 2026, through Cloudflare, Inc, and is hosted on infrastructure resolving to 104.18.40.47. Security vendors on VirusTotal flagged the domain 18 out of 95 times, with detections including social engineering and phishing classifications. The site appears on three security blocklists, and its page title, 'Ûphold Login,' closely resembles the legitimate Uphold branding, further confirming its deceptive intent. If you visited uphald-logun.gitbook.io and entered login details, immediately revoke access to any connected sessions and change your Uphold password. Enable multi-factor authentication on all accounts, and monitor for unauthorized transactions or suspicious activity. Avoid reusing passwords across platforms, and verify the legitimacy of any login page before entering credentials. If financial loss occurred, report the incident to relevant authorities and your financial institution.