pyme-att[.]mx

The domain pyme-att.mx is identified as a generic phishing site, posing an elevated risk to users. The domain impersonates ATT and is currently offline. Analysis indicates that this domain has been flagged by 17 of 95 security vendors on VirusTotal, highlighting its potential threat. The domain is registered through InterNetX GmbH and resolves to the IP address 74.208.236.70, which is located in the United States and is associated with AS8560 IONOS SE. The domain was created on February 26, 2026, and appears on one security blocklist. It lacks an SSL certificate, further indicating its untrusted nature.

The domain pyme-att.mx has been taken offline, which may reduce immediate risk to users. However, the infrastructure analysis reveals that it has been active and poses a significant threat. The domain's creation date and registration through InterNetX GmbH suggest a recent and potentially targeted campaign. The lack of an SSL certificate and the IP address associated with IONOS SE in the United States are additional indicators of its malicious intent.

Given the current offline status of pyme-att.mx, users are advised to remain vigilant and avoid accessing the domain if it becomes active again. Organizations should update their security policies to include this domain in their blocklists and monitor for any related activity. Regular security audits and user education on recognizing phishing attempts are recommended to mitigate future risks.