MALICIOUS — CRITICAL
att.feniu.cc için kimlik avı ve güvenlik kontrolü
att[.]
att.feniu.cc is a credential theft site impersonating AT&T. Domain is flagged by 19/95 security vendors and blocked on 1 security blocklist for fraudulent.
- VirusTotal
- 19/93
- Blocklists
- No stored match
- Kullanılabilirlik
- İçerik kullanılamıyor · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
att.feniu.cc — İçerik kullanılamıyor (HTTP 502). Marka kimliğine bürünme: Att. Kanıt özeti: VirusTotal 19/93 (ADMINUSLabs, Criminal IP, alphaMountain.ai, Chong Lua Dao, Cluster25); URLScan malicious verdict; Spamhaus DBL_PHISH; PhishDestroy score 95/100.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Evidence Analysis
This domain, att.feniu.cc, is identified as a credential theft operation specifically designed to impersonate AT&T under the guise of "Holiday Deals 2025." The site targets users by presenting fraudulent promotional offers, likely prompting visitors to enter sensitive login credentials or personal information under false pretenses. Analysis of the page title and domain structure indicates a deliberate attempt to exploit brand recognition, a common tactic in credential harvesting schemes targeting telecommunications customers. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on February 21, 2026, a future date inconsistent with legitimate operational timelines, suggesting domain spoofing or an error in registration records. Security vendors on VirusTotal flag the domain at 19/95, reflecting broad consensus on its malicious nature. Additionally, the domain appears on one security blocklist and is blocked by enterprise-grade threat intelligence platforms. The site resolves to IP address 172.67.156.251, hosted on Cloudflare infrastructure (AS13335), a common obfuscation technique used to mask the true origin of malicious content. The SSL certificate is issued by WE1, a non-standard certificate authority often associated with low-assurance or fraudulent domains. Users who visited att.feniu.cc should take immediate remedial action to mitigate potential compromise. First, reset any credentials entered on the site, particularly those associated with AT&T or other sensitive accounts. Enable multi-factor authentication on all critical services to prevent unauthorized access. Monitor financial and communication accounts for suspicious activity, including unauthorized logins, messages, or transactions. If personal or financial information was submitted, consider reporting the incident to relevant fraud reporting authorities and credit monitoring services. The domain is currently offline, but users should remain vigilant for similar scams, especially during holiday promotional periods.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Veri kapsamı12 recorded checks
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
VirusTotal Analizi
Kanıtlar ve Dış RaporlarIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.