uzseksi[.]xyz

PhishDestroy identifies uzseksi.xyz as an active crypto drainer domain posing elevated threats to cryptocurrency users. This site mimics legitimate services to trick visitors into connecting malicious wallet drainers, specifically targeting digital asset theft. While no branded impersonation was detected, the domain leverages a generic but effective scam tactic common in crypto phishing operations.

Technical analysis reveals uzseksi.xyz resolves to IP 144.31.238.129, was registered through Global Domain Group LLC on April 20, 2026, and holds a valid Let’s Encrypt SSL certificate. VirusTotal detection stands at 1/95 security vendors, indicating low but present recognition of malicious intent. The domain remains unblocked by Google Safe Browsing as of assessment, leaving users vulnerable to direct exposure.

This domain remains active and accessible, with no takedown action observed during analysis. Users are strongly advised to avoid interaction, block the domain locally, and report to security platforms. Despite low detection rates, the presence of a drainer kit and fresh registration date signals high-risk potential. Remaining risk remains elevated due to active hosting and lack of widespread blocking.