yetis[.]sbs

The domain yetis.sbs has been identified as a generic phishing threat, currently categorized with an elevated risk level. It targets users through impersonation tactics, specifically associated with the name 'Tether Plesk', as indicated by the page title discovered. The domain was taken offline as part of the security response to mitigate any potential harm from its activities.

Technical analysis of yetis.sbs reveals that it was flagged by 19 out of 95 vendors on the VirusTotal platform. The domain was created on November 24, 2025, and was registered through Dynadot LLC. It resolves to the IP address 167.99.38.75, located in the Netherlands under AS14061 DigitalOcean, LLC. Additionally, yetis.sbs appears on 2 security blocklists, including PhishDestroy and PhishingDB, further evidencing its malicious nature. Notably, the domain lacked an SSL certificate, which is a common indicator of untrusted web activities.

As of the current status, yetis.sbs has been taken offline, which reduces its immediate threat potential. Users should exercise caution when encountering similar domains or phishing tactics, ensuring the verification of the legitimacy of any links or communications claiming to be from 'Tether Plesk'. It is recommended to maintain up-to-date security software and utilize multi-factor authentication to protect against unauthorized access. Regularly educating users on recognizing phishing threats can also reduce susceptibility to such schemes.