mirror of
https://github.com/laylavish/uBlockOrigin-HUGE-AI-Blocklist.git
synced 2026-08-06 02:12:35 -04:00
[GH-ISSUE #242] ADD PHISHING SITE https://y-comblnator [.] com/apply #157
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: DYNR/uBlockOrigin-HUGE-AI-Blocklist#157
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @JMcrafter26 on GitHub (Sep 23, 2025).
Original GitHub issue: https://github.com/laylavish/uBlockOrigin-HUGE-AI-Blocklist/issues/242
Bad URL: https://y-comblnator [.] com/apply
Domain: https://y-comblnator [.] com/
Reason for report:
This domain impersonates the legitimate Y Combinator site by replacing the “i” with an “l” in the URL to trick users. The site engages in spammy behavior, including mass pings and unsolicited issues on GitHub: https://github.com/ycombin/ator/issues/17.
(https://web.archive.org/web/20250923205627/https://github.com/ycombin/ator/issues/17)
Impersonation details:
• Misleading name and branding to appear as official Y Combinator communications.
• Promises $100M investment for a non-existent W2026 program.
• Asks users to verify wallets and make a refundable deposit, which is not part of YC’s official process.
Impact:
• Users may be tricked into providing sensitive information or making payments.
• Spam and unwanted notifications on GitHub repositories can disrupt legitimate developer activity.
Recommendation:
This domain should be flagged and blocked by security filters, domain registrars, and Safe Browsing services. Users should only apply via the official Y Combinator site: https://www.ycombinator [.] com/apply.
Additional notes:
• Official YC communications do not request wallet verification or deposits.
• This domain could potentially be used for phishing or financial scams.
• GitHub contributors should report spam activity via GitHub’s abuse reporting system.
• Security teams should monitor for similar “lookalike” domains that attempt to exploit brand trust.
@JMcrafter26 commented on GitHub (Sep 23, 2025):
Sorry it was the wrong blocklist
@wilsontulus commented on GitHub (Sep 30, 2025):
It's now listed in one of the uBO's own blocklists