www-yi-ailocations[.]xyz

The domain www-yi-ailocations.xyz was registered on March 06, 2026 through NiceNIC International Group Co., Limited and is currently offline. DNS resolution points to the Cloudflare address 188.114.96.3, hosted in the United States under ASN13335 (Cloudflare, Inc.). No SSL certificate is presented, indicating that encrypted HTTPS connections are not available for this host. The sole page title observed, "币安人生 | Distribution," contains the Chinese name for the Binance exchange, suggesting an attempt to lure victims into a credential‑harvesting or fraudulent distribution scheme targeting Binance users.

Technical analysis shows that four of ninety‑four VirusTotal scanners flagged the domain as malicious, and the domain is listed on four independent security blocklists, including PhishDestroy, MetaMask, ScamSniffer, and SEAL. These detections corroborate the classification of the site as a generic phishing infrastructure. Although the site is taken offline, its recent registration, use of a reputable CDN, and lack of TLS make it a transient threat that can be re‑activated quickly.

Uncertainty remains regarding the exact content of the landing page, the phishing kit employed, and any associated command‑and‑control infrastructure because no further forensic artefacts have been captured. Defenders should add the domain and its resolving IP to deny‑list entries, monitor Cloudflare‑originated traffic for similar patterns, and continue to scan related sub‑domains for re‑emergence. Continuous threat‑intel feeds should be consulted for any resurgence, and any user reports referencing the Binance brand should be treated with heightened scrutiny.