yobit[.]in

This report analyzes the domain yobit.in, which was identified as a cryptocurrency scam site impersonating the MetaMask brand. The page title displayed a "Clock error" message, indicating the site was likely designed to deceive users into believing they were interacting with a legitimate MetaMask service. The threat posed includes potential theft of cryptocurrency credentials or funds through phishing or other fraudulent means.

Technical evidence confirms the malicious nature of this domain. VirusTotal detected 11 out of 95 vendors flagging the site as malicious. The domain was registered through Endurance Digital Domain Technology Private Limited, with an IP address of 65.108.39.53 located in Finland, associated with AS24940 Hetzner Online GmbH. The domain was created on 2025-08-03 and uses an SSL certificate issued by Let's Encrypt (E6). Nameservers include ns10.uadns.com, ns11.uadns.com, and ns12.uadns.com. The site was flagged by multiple security services including ChainPatrol, alphaMountain.ai, CyRadar, ESET, and Forcepoint ThreatSeeker, and appears on one blocklist.

The current status of yobit.in is down or offline. The GridinSoft trust rating is 0 out of 100, and the DOM risk score is 10, indicating a high risk. Given the impersonation of a well-known brand, low trust score, and multiple security vendor detections, this domain poses a significant threat to users and should be avoided entirely.