utzms[.]cn

The domain utzms.cn has been identified as a risk for brand impersonation, specifically targeting Binance. Despite the page title referencing 'Mercado Libre,' the core intent of the domain appears to involve mimicking Binance to deceive users potentially for credential theft or crypto drain activities. No specific drainer kit is associated; however, the misalignment in branding suggests a phishing tactic intended to exploit user trust in established brands.

Technical analysis highlights several indicators of malicious activity. The domain was detected by 18 out of 95 security vendors on VirusTotal, indicating a significant threat profile. Registered through Web Commerce Communications Limited, the domain resolves to the IP address 137.220.153.39, located in Hong Kong and associated with AS4907 BGPNET PTE. LTD. Network. The domain creation date is suspiciously set to December 20, 2025, which could represent either a clerical error or an intentional obfuscation tactic to evade scrutiny. Current domain analysis shows that it appears on one known security blocklist.

The domain status is presently offline, suggesting a response action has been initiated, likely coordinated by relevant cybersecurity entities such as PhishDestroy. Despite its offline status, the initial elevated risk level necessitates continued vigilance, as the operators may seek alternative infrastructures to conduct similar activities. Users are advised to remain cautious, particularly when dealing with cryptocurrency-related sites and to verify authenticity through known channels. Organizations should also consider implementing additional security controls, such as enhanced monitoring of DNS registrations and automated blocking of high-risk domains.