uutcoin[.]com

Analysis on 22 July 2026 identifies uutcoin.com as a brand‑impersonation infrastructure targeting the Ethereum ecosystem. The domain was registered on 23 October 2025 through Amazon Registrar, Inc. and resolves to the IPv4 address 18.244.18.61, which is hosted in Germany under ASN 16509 (Amazon.com, Inc.). No SSL certificate is presented for the site, indicating that any transport would occur over unencrypted HTTP. The authoritative nameservers are ns-1504.awsdns-60.org, ns-1589.awsdns-06.co.uk, ns-251.awsdns-31.com, and ns-897.awsdns, all belonging to Amazon Route 53.

The page title returned from the live endpoint before takedown was "Home | EARNUSDT," a phrase commonly associated with crypto‑related scams, reinforcing the brand‑impersonation classification. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service. Gridinsoft assigns a trust score of 22 / 100, reflecting low reputational confidence. VirusTotal recorded scans from 95 independent vendors; none reported a detection, but the absence of a detection does not imply safety given the confirmed impersonation behavior.

Current status is offline, suggesting the operator has withdrawn the site, yet the infrastructure (nameservers, hosting IP, registrar) remains observable and could be reused. Defenders should add the domain and its resolved IP to blocklists, monitor the associated nameservers for future registrations, and enforce TLS inspection policies to detect any unencrypted traffic to the host. Continuous watch of threat‑intel feeds for re‑appearance of similar brand‑impersonation campaigns is recommended.