uphnolldlogun-usa[.]gitbook[.]io

Analysis of the domain uphnolldlogun-usa.gitbook.io indicates that it poses a specific threat of credential theft. The domain is designed to impersonate the legitimate Ûphold platform, which is known for digital asset trading. This impersonation aims to deceive users into entering their login credentials, potentially leading to unauthorized access to their accounts and financial loss.

The domain has been flagged by 16 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion among the security community. It is registered through Cloudflare, Inc., and was created on March 30, 2014. The domain has also been flagged by Google Safe Browsing for social engineering and appears on three security blocklists. Additionally, it is blocked by MetaMask, PhishDestroy, and SEAL, further confirming its malicious nature. The domain resolves to the IP address 104.18.40.47 and utilizes technologies such as GitBook, Google Cloud, HSTS, Google Cloud Trace, and HTTP/3.

Users who have visited this domain are advised to immediately change their Ûphold account passwords and enable two-factor authentication (2FA) if it is not already activated. It is also recommended to monitor account activity for any unauthorized transactions and report any suspicious activity to the Ûphold support team. Security professionals should update their threat intelligence databases to include this domain and IP address to prevent future incidents.