yolowhale[.]com
“Yolowhale: Most Popular Online Crypto Casino Based on Blockchain”
yolowhale.com — Conteúdo indisponível (HTTP 502). Representação da marca: Genericcrypto; Tipo de golpe: Crypto Scam. Resumo das evidências: VirusTotal 13/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); URLQuery 100 det.; URLScan malicious verdict; PhishDestroy score 100/100. Registrador: Web Commerce Communica….
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
Analysis of yolowhale.com shows a short-lived domain created on 27 September 2025 and currently taken offline. The domain resolves to 172.67.221.43, an address owned by AS13335 Cloudflare, Inc. in the United States. No TLS certificate is presented, indicating the site operated over plain HTTP. The page title retrieved from the site – “Yolowhale: Most Popular Online Crypto Casino Based on Blockchain” – aligns with the classified scam type of a crypto‑focused gambling phishing operation. Intelligence records link the site to the publicly‑available Gambler Scam phishing kit, a toolkit often used to harvest credentials for crypto‑casino accounts. The registrar listed is Web Commerce Communications Limited, and the nameservers are courtney.ns.cloudflare.com and matt.ns.cloudflare.com, both standard Cloudflare names.
Threat‑intelligence aggregators have flagged the domain. VirusTotal reports 13 of 95 scanning vendors detecting malicious behavior. PhishDestroy has added the domain to its blocklist, and it appears on an additional security blocklist. Gridinsoft assigns a trust score of 1 / 100, indicating extreme risk. AlienVault OTX references the domain in a single pulse, confirming its presence in at least one community‑shared indicator set.
The domain is also listed on a generic blocklist used by multiple security products. The available evidence confirms that yolowhale.com was actively used for a crypto gambling phishing campaign before being taken offline. Uncertainty remains regarding any residual infrastructure, such as whether the IP address continues to host other malicious payloads or if the phishing kit has been redeployed under a different domain. Defenders should continue to block the domain and its associated IP address, monitor Cloudflare‑owned ranges for similar activity, and consider adding the domain hash to internal blocklists.
Sinais de segurança
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, SANs do SSL, carimbos de data e hora
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análise do VirusTotal
Evidências e relatórios externos
“I was tricked into sending BTC to the above wallet address, which I now understand is associated with a scam operation. After I completed the transaction using Ramp, the funds were quickly forwarded to other addresses — a common tactic to obfuscate tracing.”
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo