att[.]ltayd[.]cc

The domain att.ltayd.cc is currently active and has been classified as a brand impersonation threat with an elevated risk level. This domain specifically targets users by impersonating x.com, a well-known social media platform. The page title observed is "Welcome to nginx!", which is a default nginx landing page often used as a placeholder for phishing sites. PhishDestroy has identified this domain through its unique seed c0297d and confirms it is actively being used for malicious purposes.

Technical indicators reveal that att.ltayd.cc was registered on January 17, 2026, through Gname.com Pte. Ltd., a registrar sometimes associated with questionable domains. The domain resolves to IP address 104.21.9.73 and its SSL certificate is issued by Google Trust Services (WE1). VirusTotal analysis shows that 16 out of 95 security vendors flag this domain as malicious, and it appears on at least one security blocklist. These data points collectively suggest a high likelihood of phishing activity targeting X.com users.

Given the elevated risk level and active status, users should exercise extreme caution when encountering this domain. PhishDestroy strongly recommends not visiting att.ltayd.cc, clicking any links within it, or entering any personal information. Organizations using X.com should educate their employees about this specific impersonation attempt. It is advisable to block the domain at the network level and report it to relevant security teams. Always verify URLs before interacting with any site claiming to be X.com.