t-mobile[.]wogkd[.]cc

The domain t-mobile.wogkd.cc was registered on February 21, 2026 and is currently listed as offline. DNS resolution points to the IP address 172.67.204.253, which belongs to ASN 13335 operated by Cloudflare, Inc., located in the United States. The site presented an SSL certificate identified as WE1, indicating the use of a standard TLS wrapper without further validation details. Reputation scoring from Gridinsoft assigned a zero‑score out of 100, reflecting a complete lack of trust.

The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service, confirming that at least one dedicated anti‑phishing platform has taken mitigation action. VirusTotal analysis returned 12 detections out of 93 submitted security vendors, demonstrating that a non‑trivial subset of industry scanners classified the host as malicious. No additional intelligence such as page title, brand targeting, or specific phishing kit descriptors was available in the collected data, leaving the exact content of the compromised page unverified.

Given the observed indicators—recent creation, Cloudflare hosting, low trust score, blocklist presence, and multiple vendor detections—defenders should treat t-mobile.wogkd.cc as a confirmed phishing infrastructure. Recommended actions include adding the domain and its resolving IP address to outbound filtering rules, monitoring for any re‑use of the IP range in future campaigns, and ensuring that endpoint protection solutions ingest the VirusTotal detection count. Continuous re‑evaluation is advised should the domain become active again or new threat intelligence emerge.