yabby-casino[.]co[.]com

Analysis of yabby-casino.co.com indicates this domain is actively impersonating Apple as part of a tech support scam operation. The domain was registered on August 16, 1997, through Moniker Online Services LLC, though its long registration history does not mitigate the current threat. The site resolves to IP 188.114.97.3, hosted on Cloudflare's network (AS13335) in the United States, which is commonly exploited by threat actors to obscure malicious infrastructure. The page title, 'Yabby Casino Australia: Instant Login & A$4,000 Bonus,' does not align with the claimed Apple impersonation, suggesting either a misconfiguration or an attempt to disguise the true nature of the scam under a gambling theme. Technical indicators confirm malicious intent: the domain is blocked by PhishDestroy, Polkadot, Enkrypt, and Codeesura, and appears on four security blocklists. Gridinsoft assigns a trust score of 0/100, further supporting its classification as high-risk.

Three of 91 security vendors on VirusTotal flag the domain, though the absence of broader detection does not imply safety. The site uses Cloudflare for DDoS protection and SSL encryption (issued by Cloudflare TLS Issuing ECC CA 3), which are neutral technologies but frequently leveraged by phishing campaigns to appear legitimate. Detected technologies include WordPress, MySQL, PHP, Yoast SEO, and jQuery, a common stack for scam sites due to its ease of deployment. The scam type is classified as a tech support scam, though the gambling-themed page title introduces uncertainty about the exact attack vector. No Apple branding or support-themed content is evident from the available data, so the impersonation claim relies on external intelligence.

MX records point to _dc-mx.eb02d212159b.yabby-casino.co.com, a non-standard configuration that may facilitate phishing emails or credential harvesting. The domain remains active with an HTTP 200 status, confirming operational status as of July 22, 2026.