yield[.]airdropalert[.]us

This domain, yield.airdropalert.us, was created on 19 October 2025 through Dynadot LLC. Infrastructure analysis shows it resolves to IP 192.178.155.105, which belongs to AS15169 Google LLC and is geolocated in the United States. The domain is hosted on Cloudflare DNS, using the authoritative name servers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. No TLS certificate is presented, indicating the site would be accessed over plain HTTP only. Brand‑impersonation indicators are present: the page title returned from the host is "Google", and the domain is explicitly listed as impersonating Google.

The scam classification is recorded as a crypto‑scam, suggesting that any content would likely attempt to solicit cryptocurrency assets under the guise of a Google‑related airdrop. Detection signals confirm malicious intent. PhishDestroy has blocked the domain, and it appears on one public security blocklist. The Gridinsoft trust score is 0 out of 100, the lowest possible rating.

VirusTotal analysis shows that 13 of 93 scanned security vendors flagged the domain as malicious, reinforcing the suspicion of abuse. The domain is currently taken offline, limiting immediate exposure, but the combination of brand impersonation, a lack of encryption, low trust rating, and multiple vendor detections indicates a high likelihood of fraudulent activity. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any resurrection of the host or use of the same IP address, and add the domain to internal blacklists. Additional investigation should target any related sub‑domains or future registrations that reuse the same name servers or IP range, as threat actors often recycle infrastructure.