uzax[.]top

PhishDestroy identifies uzax.top as an active credential theft domain operating at an elevated risk level. The domain is currently engaged in phishing operations designed to harvest user credentials under false pretenses, posing a significant threat to unwary visitors.

This domain was flagged by 11 out of 95 VirusTotal security vendors within 24 hours of analysis. Registered through PDR Ltd. d/b/a PublicDomainRegistry.com, it resolves to IP address 188.114.97.3 and holds a valid SSL certificate issued by Let's Encrypt. The domain was created on March 31, 2026, indicating a recently established infrastructure likely intended to evade detection. Multiple security platforms have already begun listing this domain on blocklists, reinforcing its malicious intent.

Organizations and individuals should immediately block uzax.top at the network and endpoint levels. Users who may have accessed the domain should rotate credentials used on any site accessed via this domain and enable multi-factor authentication where available. Monitor accounts for suspicious login attempts and consider deploying DNS filtering solutions to prevent future access.