bitxchain[.]uk

Analysis of the domain bitxchain.uk, observed as offline as of 23 July 2026, indicates a targeted brand‑impersonation campaign aimed at users of the Aave platform. The site was registered through Porkbun LLC on 23 December 2025 and resolves to IP 66.45.244.235, which belongs to AS19318 Interserver, Inc, located in the United States. The domain uses the nameservers dns1400a.trouble‑free.net and dns1400b.trouble‑free.net, both commonly associated with disposable hosting services. No TLS certificate is presented, leaving the site accessible only via HTTP.

The page title returned from the now‑taken‑down site reads "BitXchain - Trading for everyone," which does not reference Aave but the domain name and title suggest an attempt to lure cryptocurrency traders. Security‑vendor scans on VirusTotal recorded six detections out of ninety‑three scanners, confirming malicious intent despite the relatively low detection ratio. The domain appears on a single external blocklist and is actively blocked by PhishDestroy, indicating that at least one security feed has flagged the infrastructure. Gridinsoft assigned a trust score of 0 / 100, reinforcing the assessment of a low‑reputation host.

Given the limited public visibility, the exact payload or credential‑capture mechanism remains unknown; no forensic capture of the landing page content has been published. Defenders should continue to block the IP address 66.45.244.235 and the domain bitxchain.uk at DNS and proxy layers, monitor for any re‑hosting attempts under related subdomains, and update endpoint protection rules to include the observed VirusTotal signatures. Organizations that employ Aave services should educate users about the absence of a legitimate "BitXchain" offering and advise against interacting with unsolicited links referencing this domain.