yakteam[.]xyz

Analysis of yakteam.xyz shows a newly registered domain created on April 18, 2026 that is actively serving a generic phishing campaign. The domain resolves to the IP address 188.114.96.3 and is hosted behind Cloudflare, as indicated by the authoritative nameservers brad.ns.cloudflare.com and emma.ns.cloudflare.com. Registration was performed through NameCheap, Inc., a registrar commonly used for rapid domain provisioning. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy threat feed, confirming that at least one trusted feed has taken mitigation action.

VirusTotal scans report that 20 of 91 security vendors flag the domain as malicious, providing a consensus detection rate of roughly 22 percent. No additional intelligence such as page title, SSL certificate details, HTTP response codes, or Safe Browsing verdicts is currently available, leaving the exact payload and victim lure undefined. Uncertainty remains regarding the specific phishing lures employed and any associated command‑and‑control infrastructure.

Defenders should add yakteam.xyz to DNS deny lists, enforce web‑proxy filtering, and monitor outbound connections to 188.114.96.3. Continuous re‑scanning on VirusTotal and inclusion in local threat‑intel feeds are recommended to capture any evolution in detection scores. Organizations using email security gateways should ensure that URLs pointing to yakteam.xyz are quarantined, and incident response teams should be prepared to investigate any credential submissions that may have been captured through this domain.