att[.]hzyuw[.]icu

PhishDestroy has identified att.hzyuw.icu as an elevated risk domain engaged in generic phishing activity. This domain was designed to impersonate AT&T, likely targeting users with fake login pages or account verification scams to steal credentials. Although currently taken offline, its short-lived nature and low trust indicators make it a significant threat.

The domain was created on February 21, 2026, and resolves to IP address 172.67.128.26 with SSL certificate from WE1. VirusTotal flagged it with 17 out of 95 security vendors marking it as malicious, and it appears on 1 security blocklist. These data points, combined with the domain's recent creation and generic phishing structure, strongly suggest malicious intent.

Users who may have encountered att.hzyuw.icu should avoid entering any personal information, especially AT&T account credentials or financial details. If you interacted with this site, change your AT&T password immediately and enable two-factor authentication. Run a full antivirus scan on any device used to access the domain, and monitor accounts for unauthorized activity. Always verify URLs by visiting the official AT&T website directly rather than clicking links in unsolicited messages.