yolood[.]xyz
“Yolood: Most Popular Online Crypto Casino Based on Blockchain”
yolood.xyz — Contenido no disponible (HTTP 502). Suplantación de marca: Genericcrypto; Tipo de estafa: Crypto Scam. Resumen de las pruebas: VirusTotal 12/93 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 2 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; PhishDestroy score 90/100. Registrador: Web Commerce Communica….
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Analysis of yolood.xyz, a domain first observed on December 02, 2025, indicates an active crypto‑scam infrastructure that was taken offline prior to the report date of July 23, 2026. The site presented the page title "Yolood: Most Popular Online Crypto Casino Based on Blockchain" and leveraged the publicly available Gambler Scam phishing kit, suggesting a targeted effort to lure cryptocurrency users. Technical profiling shows the domain resolves to IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc., located in the United States. No SSL certificate was detected, leaving the HTTP connection unencrypted and vulnerable to interception.
The registrar is listed as Web Commerce Communications Limited, and the domain is configured with Cloudflare nameservers lily.ns.cloudflare.com and mark.ns.cloudflare.com. Gridinsoft assigned a trust score of 0 out of 100, reflecting an extremely low confidence rating. VirusTotal scanned the domain with 93 security engines, of which 12 reported detections, confirming that multiple vendors consider the site malicious. The domain appears on one known security blocklist and has been flagged by PhishDestroy.
While the infrastructure details, such as the use of Cloudflare’s CDN, are clear, the full scope of the phishing campaign—including any compromised user accounts or financial losses—remains unknown due to the site’s offline status. Defenders should continue to block yolood.xyz at perimeter firewalls, DNS resolvers, and endpoint protection solutions, monitor for any related C2 IP activity originating from 188.114.96.3, and audit logs for traffic to Cloudflare edge nodes that may indicate residual activity. Ongoing intelligence collection is recommended to capture any re‑hosting attempts or related domains that reuse the same phishing kit or registrar details.
Inteligencia de seguridad de red
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | yolood.xyz |
phishing | Phishing Block |
| Hagezi Threat Feed | yolood.xyz |
malicious | Sinkholed |
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Datos y informes externos
PD-20260105-7EA3A5 Recipient: compliance_abuse@webnic.cc ¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.