Security Report: xby.yinuo79.online - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2c7fea79-470b-491e-98d4-58866af283ad Domain and IP registration (RDAP)/api/v1/rdap/2c7fea79-470b-491e-98d4-58866af283adHow often this domain was scanned/api/v1/domain/stats/xby.yinuo79.online Scan history for this domain/api/v1/domain/history/xby.yinuo79.online?limit=15

This website contacted 20 IPs in 3 countries across 9 domains to perform 59 HTTP transactions. The main domain is yinuo79.online and was registered 2 months ago.

Submitted URL: https://xby.yinuo79.online/

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Analyst-vetted DarkSword iOS exploit kit (Coruna wallet stealer) plus CRITICAL exploit-kit C2 alerts and multi-source malware flags on the primary domain. Treat as malicious; do not interact.

Risk Factors (6)

Known malicious exploit kit (DarkSword iOS / Coruna wallet stealer) detected on page

CRITICAL network intrusion-detection alerts for exploit-kit C2 beaconing

Primary domain flagged as malware by multiple independent threat-intel feeds

Nine threat-intel domain matches, multiple with multi-feed corroboration

Social-engineering lure (fabricated online-user counters, urgency countdowns) over a newly registered 62-day-old domain

Page text coaches the user through copying links and reopening in Safari rather than using the current browser (defense-evasion pattern consistent with mobile exploit delivery)

Domain age information unavailable

Details

Page Title

Aimee — Your dating partner

Scan Type

public

Favicon Hash

MMH3: -66033513

MD5: 37ee7c27f2e5fbfab9f9d2d1abd8004d

Domain Name Analysis

The domain 'xby.yinuo79.online' uses the modern generic top-level domain (.online) with subdomain 'xby'. Count 7 characters in 'yinuo79' containing three vowels alongside two consonants, along with two digits. Tokenizing the label suggests four words: yin, u, o, 79. Expect 1.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.23s

Total Load Time

4.1 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:2,125 chars

Detector Agreement:75%

Website Classification

Primary Category

social media network56% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

social media network

56%

technology software

53%

news media journalism

43%

government public service

43%

cryptocurrency blockchain

42%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
21	5.255.61.234	Georgia	AS199242Malakmadze Web LLC
2	104.21.46.61Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.26.14.12Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	23.36.162.70Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	23.50.131.221Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	172.67.168.32Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	23.36.163.224Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	23.36.163.231Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
59	20	-	-