migrate-yieldbasis[.]world

Analysis indicates that the domain migrate-yieldbasis.world was registered on 21 February 2026 and is currently offline. DNS resolution points to the Cloudflare‑owned address 104.21.20.101, located in the United States under ASN 13335. The domain is served without an SSL certificate, meaning any traffic would be unencrypted HTTP. The public page title returned by the server is “Nur einen Moment…”, which offers no indication of the intended victim interface. The site has been classified as an investment scam and appears on three external blocklists.

It has been actively blocked by PhishDestroy, MetaMask, and SEAL, and four of ninety‑three VirusTotal scanners have flagged it as malicious. Gridinsoft assigns a trust score of zero out of one hundred, reflecting extreme suspicion. The domain’s nameservers are sage.ns.cloudflare.com and tina.ns.cloudflare.com, both belonging to Cloudflare’s DNS service. An AlienVault OTX pulse references the domain in a single threat‑intel feed, confirming that it has been observed in the wild.

Because the site is presently taken offline, content analysis is limited to the page title; no further HTML or payload details have been captured. Defenders should continue to block the domain at the DNS and proxy layers, consider blacklisting the associated IP address while noting that Cloudflare may host unrelated benign sites on the same address, and monitor the domain for any future re‑hosting. Adding the domain to internal threat‑intel feeds and sharing the indicator set with partner organizations will aid in early detection should the actors reactivate the infrastructure. Ongoing observation of the three blocklists that already list the domain is recommended to capture any changes in its status.