What Gridinsoft observed on upgex.com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20261024052843-85221d09
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Scope-limited uptime-service review
- Evidence basis
- First-party site analysis External vendor intelligence: Contradictory context — not used for this decision
No phishing or cryptocurrency scam was reproduced on the reviewed current public pages. The historical crypto description is unsupported for that scope. Overall service safety remains inconclusive because authenticated functions and user-published content were not assessed.
Analyst findings
Review 5 documented observations View evidence
The apex homepage and its www redirect served an UpGex uptime-monitoring site. Pricing, terms, privacy and status-page documentation describe website, API and infrastructure monitoring. The reviewed pages did not reproduce cryptocurrency trading, celebrity promotions, a bonus-code scheme or a deposit-to-unlock demand.
- Public artifact URL https://upgex.com/
- Public artifact URL https://www.upgex.com/
- Public artifact URL https://upgex.com/pricing
- Public artifact URL https://upgex.com/terms
- Public artifact URL https://upgex.com/privacy
Browser navigation opened the UpGex-branded sign-in page at app.upgex.com. Retrieved login and registration forms submit to that host. The reviewed authentication script handles theme, password visibility, strength feedback and submission state; no credential forwarding to another host was identified. No credentials were submitted. This public-code check does not establish how the server processes credentials.
- Public artifact URL https://app.upgex.com/login
- Public artifact URL https://app.upgex.com/register
- Public artifact URL https://app.upgex.com/public/assets/js/pages/auth.js
The retrieved Wayback capture dated 2024-06-21 shows a cryptocurrency exchange advertising trading, staking and a wallet. This is actual archived page content, but does not itself demonstrate a fraudulent deposit transaction. Public-index results also identify a June 2024 scam report. Verisign RDAP records registration on 2026-03-29. These observations support changed content and a newer registration, without authenticating the current operator or proving every external warning is obsolete.
- Public artifact URL https://web.archive.org/web/20240621095313/https://upgex.com/
- Public artifact URL https://rdap.verisign.com/com/v1/domain/upgex.com
- Public artifact URL https://www.myantispyware.com/2024/06/23/stay-alert-the-upgex-com-bitcoin-promo-code-scam/
The exact host is also the registrable parent domain; www was checked separately. Public-index, URLscan and OTX searches did not supply a current harmful sample or URL trace. URLscan returned one sibling-host 404 record and no www results within its 30-day window. OTX returned no public pulses for either host and no apex-associated malware samples. Current antivirus entries use a blacklist method; they do not document a captured payload or observed theft.
- Public artifact URL https://urlscan.io/
- Public artifact URL https://otx.alienvault.com/api/v1/indicators/domain/upgex.com/general
- Public artifact URL https://otx.alienvault.com/api/v1/indicators/domain/www.upgex.com/general
- Public artifact URL https://otx.alienvault.com/api/v1/indicators/domain/upgex.com/malware
The service documents user-published status pages with configurable content and branding. Those pages were not enumerated or sampled. API documentation redirected to sign-in. The authenticated application, payment processing and monitoring-agent software were not assessed.
- Public artifact URL https://upgex.com/status-pages
- Public artifact URL https://app.upgex.com/api-docs
Scope and limitations
- This review covers the exact apex, its www redirect and the linked public application forms; it does not clear unrelated subdomains or certify all customer status pages.
- No account, payment, download execution or server-side audit was performed. Same-origin forms alone do not prove safe credential handling.
- Public intelligence has incomplete coverage. Registration dates do not prove operator identity, and current external warnings cannot all be attributed to the 2024 site.
Help protect others by sharing this page on social media! The more people who know about upgex.com, the fewer chances they have to deceive someone else. Help others evaluate upgex.com by sharing this page on social media!