yomix[.]ac

This domain, yomix.ac, is identified as a brand impersonation threat designed to deceive users into interacting with fraudulent cryptocurrency services. The site masquerades as a legitimate Bitcoin mixer under the name 'YoMix - Bitcoin Mixer & BTC Blender,' but analysis confirms it impersonates Google to lend false credibility. The primary risk involves crypto draining, where victims may unknowingly authorize transactions that transfer funds to attacker-controlled wallets, resulting in irreversible financial loss. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain was registered on December 22, 2025, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. VirusTotal reports that 8 out of 95 security vendors flag yomix.ac as malicious, while it appears on three independent security blocklists. The domain resolves to the IP address 172.67.176.120, and threat intelligence platforms such as AlienVault OTX have documented its presence in at least one threat pulse. Additionally, the domain holds a trust score of 0/100, further corroborating its classification as high-risk infrastructure. If you visited yomix.ac or interacted with its content, immediate action is required to mitigate potential compromise. Disconnect any connected cryptocurrency wallets from the internet and revoke all active session approvals using a blockchain explorer or wallet management tool. Scan the device used to access the site with updated security software to detect any installed malware. Monitor all linked accounts, particularly cryptocurrency wallets and email, for unauthorized transactions or login attempts. If financial loss occurred, report the incident to relevant authorities and provide them with transaction hashes, timestamps, and any communications with the attackers for further investigation.