yubit-login[.]at

The domain www.yubit-login.at is identified as a fake exchange phishing site, designed to mimic a YUBIT Exchange login page. It was first detected on February 27, 2026, the same day it was created. Despite being offline now, it had already been flagged by 2 out of 95 vendors on VirusTotal and listed on one public blocklist, specifically PhishDestroy's.

This domain was registered with Iqweb and hosted on an IP address in Belize, under the organization AS59692 IQWeb FZ-LLC. The site used a Let's Encrypt SSL certificate, which is common among phishing sites due to its free and automated nature. The platform risk score for this domain was calculated at 56 out of 100, indicating a moderate level of threat.

Phishing domains like www.yubit-login.at often exploit the gap between their creation and when antivirus databases update, typically within 24-72 hours. PhishDestroy's detection pipeline captures such threats during this critical pre-detection window, highlighting the domain's freshness rather than its safety. Although the site is currently offline, its initial activity underscores the importance of early detection and rapid response to phishing threats.