yomofficial[.]top

Analysis of yomofficial.top confirms its classification as a crypto airdrop scam site, currently offline as of July 24, 2026. The domain was registered on November 30, 2025, through NiceNIC International Group Co., Limited, and resolves to IP 104.21.53.162, hosted on Cloudflare's network (AS13335). No SSL certificate is present, increasing the risk of unencrypted data interception. Nameservers are configured as amit.ns.cloudflare.com and michelle.ns.cloudflare.com. The page title, '$YOM Airdrop,' directly indicates the scam type, targeting cryptocurrency users with fraudulent airdrop offers.

This aligns with the identified phishing kit, labeled 'Airdrop Scam' in threat intelligence sources. Detection by security vendors is limited but notable: four of the engines on VirusTotal flagged the domain as malicious, and it appears on two security blocklists, including PhishDestroy and ScamSniffer. Gridinsoft assigns a trust score of 0/100, reinforcing its high-risk status. Defenders should treat this domain as confirmed malicious infrastructure.

Blocklist the domain and IP 104.21.53.162 at network and endpoint levels. Monitor for related domains registered through the same registrar or hosted on Cloudflare IPs, as threat actors frequently reuse infrastructure. No evidence links this domain to a specific cryptocurrency project beyond the '$YOM' reference in the page title, so brand-specific protections should not be assumed without further analysis. The domain's current offline status does not eliminate risk, as it may resurface under the same or altered infrastructure.