att-bet[.]com

This domain is flagged as a high-risk generic phishing threat and remains active as of July 17, 2026. The domain was registered on June 17, 2026, through Ultahost, Inc., a registrar with a history of hosting suspicious domains. Infrastructure analysis reveals that the domain resolves to IP address 104.21.50.159, which is associated with Cloudflare's content delivery network, and uses nameservers melina.ns.cloudflare.com and pedro.ns.cloudflare.com. VirusTotal data indicates that 2 out of 91 security vendors currently flag this domain as malicious, suggesting that while some detection exists, the threat is not widely recognized across the security community. The exact nature of the phishing campaign—whether it targets credentials, personal information, or financial details—has not been determined, as no page content, brand target, or phishing kit has been analyzed for this report. It is uncertain whether the domain is actively hosting a phishing page or serving as a redirector. Defenders should treat this domain as a potential threat, monitor for any associated subdomains or IP changes, and block access at the network level until further analysis can confirm the specific attack vector. The domain's recent registration and low detection count warrant continued observation.