att[.]quikx[.]cc

Analysis of the domain att.quikx.cc indicates it was established on February 21, 2026, and has been classified as a generic phishing infrastructure targeting telecommunications credentials. The domain resolved to 104.21.80.181, an IP address assigned to Cloudflare, Inc. (AS13335) in the United States. As of July 23, 2026, the domain is offline, though it remains listed on one security blocklist and was previously blocked by PhishDestroy.

Fourteen of ninety-three security vendors on VirusTotal flagged the domain as malicious, suggesting detection by multiple engines prior to takedown. The SSL certificate, issued by WE1, does not provide additional brand attribution or trust signals. No specific phishing kit or targeted brand was identified in the available metadata, though the subdomain 'att' implies an attempt to mimic AT&T login portals.

The exact content and functionality of the site remain unconfirmed, as no page title or visual analysis is available. Defenders should treat this domain as part of a credential-harvesting campaign and review logs for connections to 104.21.80.181 or att.quikx.cc between February and July 2026. Given its Cloudflare hosting and recent takedown, monitoring for re-registration or similar subdomain patterns under quikx.cc is recommended.