yunruigold[.]cc

yunruigold.cc is an active phishing domain posing as a gold dealer to distribute a cryptocurrency drainer kit. The site leverages social engineering to trick users into connecting wallets and approving malicious transactions. No specific brand or drainer kit family was identified in available telemetry, but the domain’s infrastructure and recent creation date suggest a targeted campaign against crypto investors. This domain resolves to IP 172.67.199.134 and was registered through Dominet (HK) Limited on April 02, 2026. PhishDestroy analysis shows it has a low VirusTotal detection rate of 3/95 security vendors and uses a legitimate Let’s Encrypt SSL certificate to appear trustworthy. The domain is not currently flagged in Google Safe Browsing (GSB) but has already been reported on multiple threat intelligence platforms. yunruigold.cc remains active and poses an elevated risk to potential victims. Users are advised to block the domain at the network level and avoid any interaction. While the immediate threat is contained through monitoring, the domain’s recent registration and low detection rate indicate potential for escalation. Organizations should include yunruigold.cc in blocklists and warn users against engaging with unsolicited gold investment offers.