yoyovision[.]io

PhishDestroy identifies yoyovision.io as hosting a spoofed login portal designed to steal usernames and passwords from unsuspecting visitors. The site mimics a legitimate service interface, tricking users into entering sensitive credentials that are then harvested by attackers for credential-stuffing attacks, financial fraud, or follow-on phishing campaigns. Domain age and low detection rates on VirusTotal suggest this threat is actively growing and may not yet be blocked by many security vendors, increasing the risk of exposure for users who encounter it.

This domain was flagged after VirusTotal scanning returned 0 detections out of 95 engines on April 9, 2024. The domain yoyovision.io was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP address 188.114.96.3. It uses a Let's Encrypt SSL certificate, which may lend false credibility to victims. Because the domain is recent and under the radar, traditional browser warnings may not yet be triggered, making manual vigilance critical for users.

If you visited yoyovision.io or entered any login details, immediately change those passwords on other sites and enable two-factor authentication where possible. Scan your device with updated antivirus software and monitor your accounts for unusual activity. Report the domain to your security team or email phish@report to help block it. Always verify URLs before entering credentials and avoid clicking links from unsolicited emails or messages.