att[.]xhgrt[.]cc

The domain att.xhgrt.cc is currently identified as a high-risk brand impersonation threat, targeting the brand x.com. The domain is currently offline, which may indicate that it has been taken down by security measures or the registrar.

Infrastructure analysis reveals that the domain was registered through Gname.com Pte. Ltd. on February 21, 2026, and resolves to the IP address 188.114.96.3, which is located in the United States and is associated with AS13335 Cloudflare, Inc. The domain does not have an SSL certificate, which is often a red flag for phishing sites. According to VirusTotal, 18 out of 95 security vendors have flagged this domain as malicious, and it appears on 1 security blocklist. The page title found was 'Welcome to nginx!', which is a common default title for newly set up web servers and can indicate that the site was recently created or configured.

Given the current offline status of the domain, the immediate risk is mitigated. However, users should remain vigilant as the domain could be reactivated. It is recommended that users do not interact with this domain and report any related activity to their security team. Additionally, network administrators should consider blocking this domain to prevent accidental access by users within their network.