att[.]kxrtw[.]cc

This report details the threat assessment for the domain att.kxrtw.cc. The site displayed a page title of "Welcome to nginx!" and was classified as an impersonation scam targeting the brand x.com. The primary threat is that the domain was configured to impersonate a legitimate brand, likely for phishing or credential theft, deceiving users into believing they were interacting with a genuine x.com service.

Technical analysis reveals the domain was flagged by 19 out of 95 VirusTotal vendors. It was detected by security vendors including ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, and Cluster25. The domain is registered with Dominet (HK) Limited, created on 2026-02-21, and hosted on IP address 47.90.164.225 in the United States under AS45102 Alibaba (US) Technology Co., Ltd. The domain had no SSL certificate and utilized nameservers ns7.alidns.com and ns8.alidns.com.

The domain is currently DOWN/OFFLINE. Risk assessment tools indicate a very high threat level, with a ScamAdviser trust score of 1 out of 100 and a DOM risk score of 10. GridinSoft trust is rated at 49 out of 100. Given the active detection rate, impersonation of a major brand, and extremely low trust scores, this domain presents a severe risk to users and should be blocked.