att[.]ykrxc[.]icu

This domain, att.ykrxc.icu, is flagged for brand impersonation, specifically targeting Apple. The domain employs deceptive tactics to mimic legitimate AT&T and Apple webpages, potentially to trick users into divulging sensitive information such as login credentials and personal data.

Analysis indicates that att.ykrxc.icu was created on January 13, 2026, and is registered through Gname.com Pte. Ltd. The domain has been flagged by 16 out of 95 security vendors on VirusTotal, suggesting a moderate level of suspicion. It resolves to IP address 172.67.221.20, which is located in the United States and is associated with Cloudflare, Inc. The domain appears on one security blocklist, PhishDestroy, and was taken offline as of the latest assessment.

If users have visited this domain, they should immediately check their Apple accounts for any unauthorized activity, change their passwords, and enable two-factor authentication. Additionally, users should report any suspicious activity to their security teams and monitor their accounts for any signs of fraud or misuse.