att[.]pbeau[.]cc

The domain att.pbeau.cc was created on February 21, 2026 and is currently taken offline. Registration records show it was obtained through Gname.com Pte. Ltd., and the authoritative name servers are clark.ns.cloudflare.com and kristin.ns.cloudflare.com, indicating Cloudflare hosting. DNS resolution points to IP address 104.21.94.134, which belongs to AS13335 Cloudflare, Inc. and is geolocated to the United States. No TLS certificate is presented for the host, and the HTTP response returns the generic page title "Welcome to nginx!".

The site is classified as a brand impersonation scam targeting x.com, as indicated by the intelligence feed. Gridinsoft assigns a trust score of 0 out of 100, reflecting a lack of credibility. VirusTotal analysis shows that 12 of 93 security vendors have flagged the domain as malicious, reinforcing the suspicion of abuse. The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy service.

While the available data confirms the infrastructure and malicious intent, no detailed payload, login page, or phishing kit has been observed, leaving the exact content of the site unknown. Defenders should continue to block the domain at network perimeter devices, update DNS filtering policies to include the identified IP and name server pairs, and monitor for any re‑activation attempts. Threat intelligence feeds should be refreshed to capture any new vendor detections or additional blocklist listings, and incident response teams should treat any traffic to att.pbeau.cc as potentially hostile, especially when associated with attempts to mimic x.com.