access-yield[.]online

This domain, access-yield.online, operates as a high-risk brand impersonation phishing site targeting Google users. The fraudulent portal presents itself as a legitimate yield or investment service under the guise of Google, likely designed to harvest credentials or distribute malicious payloads. The page title "Welcome||Acessyieldstox" suggests an attempt to mimic financial or cloud-based services, a common tactic in credential theft campaigns. Infrastructure analysis reveals the domain is structured to exploit trust in the targeted brand, potentially leading to account takeovers or unauthorized access to sensitive data. Evidence supporting this assessment includes detection by 12 out of 95 security vendors on VirusTotal, indicating widespread recognition of its malicious nature. The domain was registered on June 24, 2025, through Unstoppable Domains Inc., a registrar frequently associated with high-risk registrations. It appears on three security blocklists and is flagged as phishing by Google Safe Browsing. The domain resolves to IP address 172.93.120.110, hosted under AS393960 (Host4Geeks LLC), an autonomous system linked to other fraudulent activities. Additional indicators include a Let's Encrypt SSL certificate (R13), which, while providing encryption, does not validate legitimacy. Users who have visited access-yield.online should immediately cease all interaction and avoid entering any credentials or personal information. If login details were submitted, reset passwords for the targeted account and any other services where the same credentials may have been reused. Monitor accounts for unauthorized activity and enable multi-factor authentication where available. Clear browser cache and cookies to remove any residual tracking mechanisms. Report the domain to relevant security teams or abuse contacts for further investigation and mitigation. Given the domain's high-risk status and takedown, users should remain vigilant for similar impersonation attempts.