att[.]sigkd[.]cc

The domain att.sigkd.cc was registered on February 21, 2026 through Gname.com Pte. Ltd. and is currently resolved to the Cloudflare edge address 172.67.177.105, belonging to AS13335 Cloudflare, Inc. in the United States. No SSL certificate is presented, and the HTTP response returns the generic page title "Welcome to nginx!", suggesting the site is serving a default web server page rather than a brand‑specific landing page. Google Safe Browsing has flagged the domain for social engineering, and it appears on a single security blocklist as well as being blocked by PhishDestroy. The Gridinsoft trust score is 0 out of 100, indicating an extremely low reputation.

VirusTotal analysis shows that 15 of 95 antivirus and URL‑reputation engines flagged the domain as malicious, providing additional corroboration of its abusive intent. The primary threat vector is identified as brand impersonation of x.com, matching the declared scam type. While the infrastructure details—registrar, Cloudflare hosting, lack of TLS, and low trust metrics—are concrete, the actual content delivered to victims remains unverified because the site is offline and the only observable element is the default nginx title.

Defenders should immediately add att.sigkd.cc to network and endpoint blocklists, monitor DNS queries for the domain, and enforce TLS inspection policies to detect any future activation of encrypted payloads. Ongoing surveillance of the associated IP address and Cloudflare nameservers (benedict.ns.cloudflare.com, melinda.ns.cloudflare.com) is advised, as malicious actors often shift hosting within the same provider. Given the high risk rating and confirmed impersonation of a well‑known brand, remediation should prioritize preventing outbound connections to this host and alerting users about potential fraudulent communications that reference x.com.