att[.]qncuu[.]icu

This report provides an analysis of the domain att.qncuu.icu, which has been flagged as a phishing domain. The domain was created on February 21, 2026, and has been taken offline as of the report date, July 23, 2026. The domain has a Gridinsoft trust score of 0/100, indicating a high level of distrust. It appears on one security blocklist and is blocked by PhishDestroy.

The domain resolves to the IP address 188.114.97.3, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The SSL certificate associated with the domain is WE1. Seventeen out of 95 security vendors on VirusTotal have flagged this domain, suggesting a potential threat. The exact content of the website has not been analyzed, and the specific target or type of phishing is not known.

Given the elevated risk level and the presence of security vendor detections, defenders should treat this domain with caution and ensure it is blocked at the network level to prevent any potential access by users. The offline status of the domain is a positive sign, but residual risk may still exist if the domain is reactivated or if similar domains are used by the same threat actors. Regular monitoring and updating of blocklists are recommended to stay ahead of potential re-emergence of this threat.