att[.]bfoie[.]cc

This domain, att.bfoie.cc, is flagged for credential theft. Analysis indicates that it has been used to trick users into divulging sensitive information such as usernames, passwords, and other personal data. The primary threat is that users may inadvertently provide their credentials to attackers, leading to potential identity theft, unauthorized account access, and financial losses.

Infrastructure analysis reveals that the domain was registered through Gname.com Pte. Ltd. and is currently resolved to the IP address 104.21.36.106, which is associated with AS13335 Cloudflare, Inc. in the United States. The domain was created on February 21, 2026, and has been flagged by 16 out of 95 security vendors on VirusTotal. It also appears on one security blocklist, specifically PhishDestroy, indicating a known history of malicious activity. The SSL certificate used is marked as WE1, which may suggest the domain was masquerading as a secure site to gain user trust.

If users have visited att.bfoie.cc, they should immediately change their passwords for all accounts that may have been compromised. It is also recommended to monitor account statements and credit reports for any unauthorized activity. Users should consider running a full system scan to detect any malware that may have been installed during the visit. Additionally, reporting the incident to the relevant security authorities or organizations can help mitigate the broader impact of this threat.