yieldscan[.]finance
Análisis de phishing y seguridad de yieldscan.finance
“YieldScan Terminal | Ecosystem Intelligence”
yieldscan.finance — Contenido no disponible (HTTP 502). Tipo de estafa: Investment Scam. Resumen de las pruebas: VirusTotal 1/93 (SOCRadar); URLQuery 1 alert; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrador: Hostinger.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Analysis as of July 24, 2026 indicates that the domain yieldscan.finance was registered on February 23, 2026 through Hostinger operations, UAB and is currently taken offline. The domain resolves to the IPv4 address 92.113.23.14, which belongs to AS47583 Hostinger International Limited located in Germany. DNS resolution is handled by ns1.dns-parking.com and ns2.dns-parking.com, both typical of parking services. No SSL certificate was observed, meaning the site does not provide encrypted HTTPS connections. The page title returned from the host is "YieldScan Terminal | Ecosystem Intelligence," suggesting an attempt to present a legitimate financial‑technology interface.
Detected technologies include Hostinger CDN, Google Analytics, and HTTP/3, indicating use of common web‑hosting and analytics stacks but no specialized malicious kit. The domain is classified as an investment scam and appears on three independent security blocklists, with active blocking enforced by PhishDestroy, MetaMask, and SEAL. Reputation scoring from Gridinsoft assigns a score of 0 out of 100, reflecting extreme distrust. VirusTotal analysis shows that one of ninety‑three scanning engines flagged the domain, confirming at least one detection of malicious behavior.
The low trust score, absence of TLS, blocklist inclusion, and the single vendor flag collectively point to a high‑confidence malicious profile despite the limited number of detections. Uncertainty remains around the exact payload or credential‑harvesting mechanisms because no page content was captured; the analysis is limited to infrastructure and metadata. Defenders should continue to block the domain at network perimeters, monitor DNS queries for the associated IP and nameservers, and ensure that any client‑side applications that might contact the site are patched or restricted. Ongoing surveillance of the IP address and related Hostinger assets is advised, as the infrastructure could be repurposed for future campaigns.
Inteligencia de seguridad de red
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | yieldscan.finance/ |
malware | Detects file containing Telegram Bot API |
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologías · 3 identified
Web analytics service tracking website traffic and user behavior.
marketingplatform.google.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Análisis de VirusTotal
Evidencias archivadas
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of yieldscan.finance · checked Mar 6, 2026
Datos y informes externos
PD-20260223-AC1FD7 Recipient: report@abuseradar.com ¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.