att[.]vnijsabd[.]cc

The domain att.vnijsabd.cc was created on February 21, 2026 and is currently listed as offline. Technical resolution shows it pointing to IP address 172.67.186.151, which belongs to the Cloudflare network (AS13335) and is geolocated in the United States. No TLS certificate is presented for the host, and the HTTP response returns the default page title "Welcome to nginx!", indicating that the site is served behind a generic web server rather than a brand‑specific landing page. Registration records identify Gname.com Pte. Ltd. as the registrar, and the authoritative nameservers are jessica.ns.cloudflare.com and kianchau.ns.cloudflare.com, both Cloudflare‑operated.

The domain is classified as a brand‑impersonation campaign targeting the brand x.com, as noted in the intelligence feed. VirusTotal analysis shows that 15 of 93 security vendors have flagged the host, and the domain appears on one external blocklist. Independent security tooling rates the site at a Gridinsoft trust score of 0 out of 100, and it has been blocked by the PhishDestroy filtering system.

While the site is presently offline, the combination of a recent registration, Cloudflare‑based hosting, absence of TLS, low trust rating, and multiple vendor detections suggests a high likelihood of malicious intent. Defenders should continue to block the domain at network perimeter controls, monitor DNS queries for the associated IP and nameservers, and update any URL filtering lists to include the host. Ongoing observation is recommended in case the domain becomes active again, at which point a full content inspection should be performed to verify any credential‑capture mechanisms or payload delivery.