https://yip.su/2sTEV4
104.21.79.77 · Cloudflare, Inc.
Toronto, Canada
—
200 · 62.4s
Valid· WE1, Google Trust Services, US
COMPLETED
No KB/IOK detections were recorded for this scan.
technology | ecommerce | finance | cryptocurrency | other · 4/5/2026
The page presents as Chosic (Discover New Music - Chosic) but the domain used is yip.su, a typosquat/redirecting domain. The final URL resolves to www.chosic.com, yet the initial domain and SPA indicators on the scanned page suggest impersonation and potential credential collection via dynamic JavaScript. Visuals and page title match Chosic, but domain intelligence indicates typosquatting near Wix-related signals, and the site uses extensive third-party trackers and iframes indicating a credential harvesting objective.
Abuse potential is high. The domain yip.su appears to be a typosquat with strong signals of impersonating Chosic, leveraging a legitimate-looking Chosic page title and branding to lure victims. The site employs a SPA architecture with numerous external scripts and iframes, raising the likelihood of credential harvesting via dynamically injected forms. The final URL resolves to the legitimate chosic.com, but the initial domain, DNS/WHOIS ambiguity, and aggressive tracking indicate a crafted attempt to capture user data. The presence of hidden inputs and extensive ad-network integrations further supports a malicious intent to siphon credentials or other sensitive information from unsuspecting users. This should be treated as credential_phishing with impersonation risk and restricted to immediate takedown actions.
Monitor