att[.]wkdif[.]icu

The domain att.wkdif.icu presents a malicious threat, likely involved in phishing or credential harvesting due to its fraudulent use of the "att" brand. The site impersonates AT&T to deceive users into disclosing sensitive account information, posing a risk of identity theft and unauthorized access to financial accounts.

Technical evidence from VirusTotal shows 15 out of 95 security vendors flagged the domain as malicious, with detections from ADMINUSLabs, Criminal IP, alphaMountain.ai, Cluster25, and CRDF. The domain is listed on 1 blocklist. It resolves to IP address 104.21.91.16, located in the United States and hosted by AS13335 Cloudflare, Inc. The domain was created on 2026-02-21 and uses SSL certificate WE1. The site is currently offline or down.

The domain has a risk score of 73, indicating a high threat level. Despite its current offline status, the domain remains a potential risk due to its recent creation and malicious detections. Users should avoid any interaction with this domain and ensure accounts are secured against possible compromise.