yuzuapp[.]io

The domain yuzuapp.io was registered on June 08, 2026 and is currently classified as an active generic phishing campaign with an elevated risk rating. It appears on a single security blocklist, where it is listed by PhishDestroy as a confirmed malicious site. VirusTotal analysis shows that 21 of 91 scanned security vendors have flagged the domain as malicious, indicating a notable detection rate across independent scanners.

No additional intelligence such as registrar details, IP address, hosting provider, SSL certificate information, HTTP response codes, Safe Browsing status, or page title has been published at this time, so the broader infrastructure surrounding the domain remains uncharacterized. The limited visibility suggests that threat actors may be employing a short-lived hosting setup or dynamically changing infrastructure to evade deeper attribution. Defenders should prioritize immediate blocking of yuzuapp.io at network perimeters and endpoint filters, incorporate the domain into threat intelligence feeds, and monitor for any related DNS queries or outbound connections.

Continuous re‑evaluation is advised, as further scans by additional vendors or updates to blocklists could reveal new indicators of compromise. Organizations that rely on email or web gateways should ensure that their phishing detection rules reference the current blocklist entry and that users are educated about unsolicited communications that may reference the yuzuapp.io domain.