yetidegen[.]cc

Analysis of yetidegen.cc indicates that the domain was registered on 21 February 2026 through NiceNIC International Group Co., Limited and immediately pointed to Cloudflare’s network (AS13335). The authoritative nameservers are arturo.ns.cloudflare.com and nataly.ns.cloudflare.com, and the A record resolves to 188.114.96.3, an IP owned by Cloudflare, Inc. The site presented a TLS certificate issued by Google Trust Services under the WE1 label, confirming the use of industry‑standard encryption. HTTP probing returned a 403 response and the page title reported “Suspected phishing site | Cloudflare”, suggesting that Cloudflare’s protective page was triggered, likely because the domain was flagged for abuse.

Independent security aggregators have listed the domain on two blocklists, specifically PhishDestroy and ScamSniffer, and VirusTotal records show that 13 of 93 scanning engines flagged the host as malicious. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious assessment. The domain currently appears offline, and no additional content has been captured, so the exact phishing payload or targeted brand cannot be confirmed at this time.

Defenders should continue to block the domain and its associated IP address, monitor for any re‑activation, and add the host to internal deny lists. Because the infrastructure relies on Cloudflare, future sub‑domains could be spun up on the same IP range, so broader Cloudflare edge monitoring is advisable. The evidence collectively supports an elevated risk rating and warrants immediate containment.