invite[.]youmio[.]co

invite.youmio.co was observed hosting a page titled “Youmio Season 1 Invite”. The domain was registered on 20 December 2025 through Web Commerce Communications Limited and resolves to the Cloudflare address 172.67.187.200, which is part of AS13335 Cloudflare, Inc. in the United States. No TLS certificate is presented, indicating that the site was served over plain HTTP at the time of collection. VirusTotal recorded 2 detections out of 93 scanned engines, and the domain appears on two public phishing blocklists; both PhishDestroy and ScamSniffer have actively blocked it.

The authoritative name servers listed are kyle.ns.cloudflare.com and nadia.ns.cloudflare.com. Gridinsoft assigned a trust score of 0 / 100, reinforcing the malicious classification. The current operational state is offline, but historical evidence confirms that the site was used for a generic phishing campaign. Defenders should add the domain and its resolving IP address to inbound and outbound firewall deny lists, ensure DNS filtering solutions incorporate the two identified blocklists, and monitor for any re‑registration attempts of the same name or similar sub‑domains.

Continuous telemetry from URL reputation services should be consulted for any resurgence, and any internal logs that reference the domain should be investigated for compromised credentials or unauthorized traffic. Because the site lacked an SSL certificate, attempts to intercept traffic via downgrade attacks are unlikely, but the absence of encryption further reduces any opportunity for credential capture via TLS spoofing. Overall, the evidence base—registration data, detection counts, blocklist inclusion, and trust score—supports a high confidence assessment that invite.youmio.co was a malicious phishing infrastructure that should be treated as hostile.