att[.]uoksw[.]cc

Analysis indicates that the domain att.uoksw.cc is presently taken offline, limiting immediate exposure but preserving evidence of its recent activity. VirusTotal reports that 14 of 95 security vendors have flagged the domain, suggesting a consensus among detection engines that the site was associated with malicious behavior. The domain appears on a single security blocklist and received a Gridinsoft trust score of 0 out of 100, reinforcing the assessment of high risk.

PhishDestroy has explicitly blocked the domain, and the SSL certificate presented (identified as WE1) further aligns with typical phishing infrastructure that often uses self‑signed or low‑trust certificates. The domain was registered on February 21, 2026, and resolves to IP address 188.114.97.3, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. No additional intelligence such as page titles, brand targeting, or payload samples is available, leaving the exact phishing vector and targeted audience uncertain.

Defenders should add att.uoksw.cc to DNS and proxy blocklists, enforce HTTPS inspection to capture any residual traffic, and monitor for new domains that resolve to the same Cloudflare IP range or exhibit similar registration patterns. Continuous correlation with threat‑intel feeds is advised to detect potential reuse of the infrastructure in future campaigns.