yobsmexc[.]cyou

PhishDestroy identifies yobsmexc.cyou as an active crypto drainer domain engineered to impersonate the legitimate MEXC cryptocurrency exchange. This impostor site leverages brand deception tactics to trick users into connecting wallets or entering credentials, enabling unauthorized fund transfers and credential harvesting. Investigators assess the domain as high-risk due to clear intent to mimic MEXC branding, which has been the target of numerous fraud campaigns targeting crypto traders.

This domain was flagged under seed f4a4ed with concrete indicators confirming malicious activity. The domain registered through Gname.com Pte. Ltd. on April 08, 2026, resolving to IP 202.79.166.175. VirusTotal currently reports 6/95 detections, indicating it has not yet been widely flagged by security engines despite its malicious nature. The SSL certificate issued by Let's Encrypt adds superficial legitimacy, which is a common tactic to bypass browser security warnings for unsuspecting users.

Users who visited yobsmexc.cyou should immediately disconnect any connected wallets, revoke any permissions granted to the site, and scan their devices for malware. Report the domain to MEXC support and block the IP 202.79.166.175 at the network level. Avoid accessing or entering any credentials on this domain. If funds were lost, report the incident to local law enforcement and file a complaint with the relevant financial authority.