att[.]bkvsc[.]cc

PhishDestroy has identified att.bkvsc.cc as an elevated risk domain due to a brand impersonation threat specifically targeting x.com. This is not a generic phishing attempt but a carefully crafted impersonation designed to deceive users into believing they are interacting with a legitimate x.com service. The domain was flagged by 20 out of 95 security vendors on VirusTotal, indicating broad recognition as malicious, and it also appears on one security blocklist, confirming its dangerous nature.

The technical details paint a concerning picture. The domain was registered on February 21, 2026, through Gname.com Pte. Ltd., a registrar sometimes associated with questionable domains. It resolves to IP address 104.21.83.74, which is currently active, and the page title reads 'Welcome to nginx!', suggesting a default or placeholder page that may be used to host malicious content. Notably, the domain has no SSL certificate, meaning any data transmitted would be unencrypted and vulnerable to interception. The combination of a recent creation date, lack of encryption, and high VT detection rate strongly indicates this domain is part of a coordinated phishing campaign.

For users who may have encountered this domain, immediate action is required. Since this is a brand impersonation targeting x.com, do not enter any credentials, personal information, or financial details on any page associated with att.bkvsc.cc. If you have already submitted sensitive data, change your x.com password immediately and enable two-factor authentication. Report the domain to your email provider and consider running a full security scan on your device. PhishDestroy recommends blocking this domain at the network level and educating users about verifying URLs before entering sensitive information.