vutereck[.]com

The domain vutereck.com was registered on April 24 2026 through Fewmoretaps OU d/b/a Trustname.com. It resolves to the Cloudflare‑owned address 188.114.96.3 located in Canada and is served by the nameservers ashton.ns.cloudflare.com and tina.ns.cloudflare.com. The site presents a page titled “Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | VUTERECK”, explicitly targeting the Ethereum brand and positioning itself as a cryptocurrency exchange. Security telemetry shows the domain is listed on one public blocklist and has been blocked by PhishDestroy. VirusTotal reports three detections out of ninety‑four scanned vendors, and AlienVault OTX references the domain in a single threat pulse. The SSL certificate is issued by Let’s Encrypt (E7). Independent reputation scoring (Gridinsoft) assigns a trust score of 10 / 100, indicating a high likelihood of malicious intent. The current risk rating is high and the infrastructure remains active. No public evidence of the exact landing page content beyond the title is available, and no observed credential‑stealing forms have been disclosed. Defenders should add vutereck.com to DNS blocklists, enforce outbound filtering to prevent connections to its IP, and monitor for any authentication attempts or transaction requests referencing the domain. Because the site mimics a legitimate exchange, any inbound traffic from corporate users should be investigated for potential credential compromise. Continuous re‑scanning with multi‑engine services is advised to capture any future changes in detection rates. Logging of TLS handshakes to the Let’s Encrypt certificate can aid in correlation with other Cloudflare‑hosted malicious infrastructure.