yalalabs[.]xyz

The domain yalalabs.xyz was an active brand-impersonation phishing site targeting users of the cryptocurrency protocol 'across'. It presented itself as a legitimate yield-stablecoin platform but was designed to harvest credentials or mislead victims into transferring funds. No crypto drainer kit was observed. As of the latest verification, yalalabs.xyz has been taken offline.

Technical indicators confirm the elevated risk. Only 2 of 95 VirusTotal security vendors flagged the domain, while Google Safe Browsing did not detect it. The domain appeared on 5 security blocklists, including PhishDestroy, ScamSniffer, and Polkadot. Registered through Dynadot LLC on February 21, 2026, yalalabs.xyz resolved to the IP address 172.67.172.33, hosted on Cloudflare's US network (AS13335). The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'Yala: Connecting Bitcoin liquidity with a meta yield stablecoin'. Gridinsoft assigned a trust score of 0/100, and technologies detected included Google Web Server, HSTS, and HTTP/3.

Users who interacted with yalalabs.xyz should immediately change any passwords or credentials entered on the site, enable two-factor authentication, and monitor accounts for unauthorized activity. If cryptocurrency transactions were attempted, revoke any token approvals and consider moving funds to a new wallet. Report the phishing domain to the impersonated brand's security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group for further action.