yunhansi[.]com

The domain yunhansi.com is a generic phishing site designed to deceive users into disclosing sensitive information. It does not impersonate a specific brand or employ a known crypto drainer kit. As of the latest verification, yunhansi.com has been taken offline, though it previously posed an elevated risk of credential theft or other fraudulent activity.

Technical analysis of yunhansi.com reveals limited detection by security vendors, with only 1 of 95 VirusTotal vendors flagging the domain. The domain was created on February 21, 2026, and resolved to the IP address 154.83.14.76, hosted by YISU CLOUD LTD in Hong Kong. It appears on a single security blocklist, PhishDestroy, and its SSL certificate was issued by R12. The observed page title, '抱歉，站点已暂停,' indicates the site is currently suspended. Gridinsoft assigned a trust score of 0/100 to yunhansi.com, further confirming its malicious nature.

Users who may have interacted with yunhansi.com should immediately change any exposed passwords and enable two-factor authentication on all accounts. Monitor financial and online accounts for unauthorized activity, and report the phishing domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities. If crypto wallet interactions occurred, consider revoking token approvals and transferring funds to a new wallet as a precaution.