authci[.]kyckr[.]com

The domain authci.kyckr.com is currently flagged as an active credential‑harvesting site under investigation as of 2026‑08‑04. VirusTotal records indicate that the hostname has been examined by ninety‑one scanning engines, none of which reported a detection; analysts note that a clean result does not constitute confirmation of legitimacy. The domain is listed on a single external blocklist and is actively blocked by the PhishDestroy filtering service.

No additional public intelligence such as Safe Browsing alerts, Open Threat Exchange entries, registrar WHOIS details, IP address or hosting provider information, SSL certificate data, HTTP response codes, trust‑score metrics, page‑title content, or direct evidence links have been released publicly at this time. Consequently, the broader infrastructure surrounding the domain remains opaque. Defenders should treat the domain as malicious until further verification, incorporating it into outbound URL filtering, DNS sink‑hole rules, and endpoint web‑control policies.

Continuous re‑scanning on VirusTotal and periodic checks of blocklist feeds are advised to capture any future changes in detection status. Organizations are encouraged to monitor network logs for any connections to authci.kyckr.com and to quarantine or block such traffic promptly to mitigate potential credential compromise.