MALICIOUS — CRITICAL
Перевірка домену upiwex.com на фішинг і безпеку
upiwex[.]
The domain upiwex.com was registered on 16 December 2025 through MAT BAO CORPORATION.
- VirusTotal
- 14/93
- Blocklists
- No stored match
- Доступність
- Контент недоступний · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
upiwex.com — Контент недоступний (HTTP 502). Уособлення бренду: Genericcrypto; Тип шахрайства: Crypto Scam. Зведення доказів: VirusTotal 14/93 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 2 alerts; URLScan malicious verdict; PhishDestroy score 100/100. Реєстратор: MAT BAO.
Докладний аналіз PhishDestroy AI нижче залишено англійською, щоб зберегти оригінальний криміналістичний запис.
Evidence Analysis
The domain upiwex.com was registered on 16 December 2025 through MAT BAO CORPORATION. DNS resolution points to IP 172.67.167.74, which belongs to Cloudflare, Inc. (AS13335) and geolocates to the United States. The authoritative nameservers are mcgrory.ns.cloudflare.com and melany.ns.cloudflare.com. No TLS certificate is presented, indicating the site was served without HTTPS. The page title retrieved from the site reads “Upiwex: Most Popular Online Crypto Casino Based on Blockchain,” aligning with the listed scam type of a crypto scam.
Analysis of the hosting environment shows the domain was associated with the Gambler Scam phishing kit, a known template used to lure victims into fraudulent cryptocurrency gambling platforms. The site has been flagged by 14 of 93 VirusTotal scanners and appears on a single security blocklist. PhishDestroy has already blocked the domain, and Gridinsoft assigned a trust score of 1 out of 100, reflecting extreme suspicion. Current network probes indicate the domain is offline, suggesting the operators have taken it down or are temporarily inactive. Defenders should continue to block traffic to 172.67.167.74 and enforce DNS sinkholing for upiwex.com.
Monitoring of related Cloudflare‑hosted IP ranges for similar phishing kits is recommended, as the infrastructure may be reused for other crypto‑focused campaigns. The lack of an SSL certificate and the low trust score provide additional indicators for automated detection rules. Attribution remains limited to the registrar information; no further registrant details or victim reports have been disclosed. Until further activity is observed, the domain should be treated as a high‑confidence indicator of a crypto casino phishing operation.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Обсяг даних13 recorded checks
Сигнали безпеки
Розвіддані з мережевої безпеки
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | upiwex.com |
phishing | Phishing Block |
| Hagezi Threat Feed | upiwex.com |
malicious | Sinkholed |
Процес реагування на загрози Pipeline
Статус у публічних блоклистах
Збережений знімок
Аналітика доменів
Технічні деталіDNS, SAN-адреси SSL, мітки часу
ICANN OVERSIGHT
Акредитація та контекст RAA
Акредитація та контекст RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Аналіз VirusTotal
Докази та зовнішні звітиIndependent lookups and source reports
PD-20260105-25A8A6 Recipient: abuse@matbao.com Victim safety and official reportingImmediate actions and verified reporting channels
Якщо ви ввели облікові дані облікового запису, особисту чи платіжну інформацію або завантажили файл із цього домену, негайно вживіть заходів. Нижче наведено ресурси, які допоможуть вам повідомити про інцидент і захистити себе.
Зверніться до місцевих органів влади
Виберіть свою країну, щоб отримати офіційні контакти кіберзлочинців або створити проект скарги →.