uptovix[.]com

The domain uptovix.com was a phishing site engaged in brand impersonation targeting Ethereum users. It posed as a cryptocurrency exchange under the false pretense of allowing users to buy and sell Bitcoin, Ether, and altcoins, but its primary objective was to deceive victims into disclosing sensitive information or transferring cryptocurrency to attacker-controlled wallets. No drainer kit was identified in this campaign. The site is currently taken offline, but its prior activity classifies it as an elevated-risk threat.

Technical indicators confirm uptovix.com as malicious. As of analysis, 1 of 95 VirusTotal security vendors flagged the domain, including Gridinsoft, which assigned a trust score of 0/100. Scamadviser rated it 21/100. The domain appeared on 1 security blocklist, specifically PhishDestroy. Registered through NameCheap, Inc. on March 17, 2025, uptovix.com resolved to the IP address 104.21.5.115, hosted by Cloudflare, Inc. in the US. The SSL certificate was issued by WE1, and the observed page title was 'Buy/Sell Bitcoin, Ether and Altcoins | Cryptocurrency Exchange | Uptovix'. Google Safe Browsing did not flag the domain at the time of assessment.

Individuals who interacted with uptovix.com should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. Enable two-factor authentication on all cryptocurrency and financial accounts. Monitor accounts for unauthorized transactions and report any suspicious activity to the relevant platform. The domain can be reported to Google Safe Browsing, PhishTank, and the impersonated brand, Ethereum, to assist in broader mitigation efforts.