uzx-incanet[.]net

The domain uzx-incanet.net has been identified as a crypto trading scam phishing site targeting users with fraudulent investment schemes. Analysis of the page title, "Bit trading," and associated infrastructure indicates an intent to deceive victims into engaging with fake cryptocurrency platforms, likely functioning as a crypto drainer. The domain is currently offline, though prior activity suggests it was designed to mimic legitimate trading services to harvest credentials or siphon digital assets. Infrastructure analysis reveals the domain was registered on April 06, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with high-risk domains. It resolved to the IP address 172.67.201.235, a hosting provider commonly used for malicious activity. Security vendors flagged uzx-incanet.net in 18 of 95 VirusTotal scans, with Google Safe Browsing categorizing it under "SOCIAL_ENGINEERING." The domain appears on four security blocklists and is explicitly blocked by MetaMask, PhishDestroy, SEAL, and InversionDNS. Additional threat intelligence from AlienVault OTX confirms its inclusion in one active threat pulse, while Gridinsoft assigned a trust score of 0/100, reinforcing its malicious classification. The domain has been taken offline, though similar infrastructure may re-emerge under different names. Organizations and individuals are advised to block uzx-incanet.net at the DNS or network level and monitor for related indicators, including the IP 172.67.201.235 and registrar patterns associated with Gname.com Pte. Ltd. Users should verify cryptocurrency platforms through official channels and avoid interacting with unsolicited trading offers. Security teams should correlate this domain with existing threat feeds to detect potential resurgence or related campaigns.