yukbit[.]space

On July 24, 2026, the domain yukbit.space was identified as an elevated‑risk brand‑impersonation site targeting the Ethereum cryptocurrency ecosystem. The domain was registered on October 10, 2025 through NameCheap, Inc. and is served by the registrar‑provided nameservers dns1.registrar-servers.com and dns2.registrar-servers.com. DNS resolution points to the IP address 38.180.16.224, which is allocated to AS9009 M247 Europe SRL and geolocated in Brazil. No TLS certificate is presented, indicating that the site does not support HTTPS.

The only visible front‑end indicator is the page title “Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | YukiTale”, which references both Bitcoin and Ethereum and suggests a fraudulent exchange service. VirusTotal scans have recorded detections by seven of ninety‑three security vendors, and the domain is listed on a single external blocklist that has been consumed by the PhishDestroy mitigation platform. Independent reputation scoring from Gridinsoft assigns a trust rating of 0 out of 100, reflecting a high likelihood of malicious activity.

The site is currently offline, preventing live HTTP status verification, and no additional content or behavior analysis is available. Analysts should continue to monitor the IP address and associated ASN for any reactivation, enforce blocklist entries in network defenses, and ensure that endpoint protection solutions incorporate the VirusTotal detection signatures. Because the domain leverages a brand‑name reference to Ethereum, any user‑initiated connections should be flagged as suspicious, and security awareness programs should warn users against unsolicited cryptocurrency trading offers from unknown domains.