yieldyak[.]pages[.]dev

Yieldyak.pages.dev was registered on 21 February 2026 through Cloudflare, Inc. and resolves to the Cloudflare‑owned address 172.66.44.67 (AS13335, United States). The site presents a Cloudflare‑generated “Suspected phishing site” page and returns HTTP 403, indicating that the content has been taken down. VirusTotal records show that 13 of 93 scanned security vendors flagged the domain, suggesting malicious activity. Reputation services assign very low scores: Scamadviser rates the domain 11/100 and Gridinsoft 0/100, reinforcing the assessment of high risk.

The domain appears on two independent blocklists – PhishDestroy and ScamSniffer – which further corroborates its classification as a phishing/investment‑fraud vector. Technical fingerprinting reveals the use of HSTS, HTTP/3, and Cloudflare’s DNS infrastructure (nameservers ganz.ns.cloudflare.com and ingrid.ns.cloudflare.com). The SSL certificate is issued by Google Trust Services under the “WE1” identifier, a common certificate for Cloudflare‑proxied sites and not indicative of legitimacy. The only publicly visible indicator is the page title “Suspected phishing site | Cloudflare”; no additional content or target brand has been disclosed.

While the domain’s current status is offline, its recent creation date, low trust scores, blocklist inclusion, and multiple vendor detections indicate it was likely deployed for an investment‑related scam. Defenders should continue to block the IP address 172.66.44.67 and the domain itself at perimeter filters, monitor for any re‑registration or similar aliases, and update detection signatures with the observed certificate and DNS patterns. Additional investigation is required to determine the exact lure or credential‑harvesting mechanisms used, as the site content is not presently available.