bellsouth-att-sign-in-0748a8[.]webflow[.]io

The domain bellsouth-att-sign-in-0748a8.webflow.io impersonates the legitimate BellSouth login page, making it a risk for credential theft. With a VirusTotal detection rate of 14 out of 95, it has been flagged by various security platforms, including a Scamadviser trust score of just 1, indicating it is very likely unsafe.

This domain was registered through MarkMonitor, Inc. and has been active for over 12 years. Its suspicious signs include hidden ownership details on WHOIS and the use of a free development platform, which often hosts illegitimate sites. Furthermore, the presence of an iframe is a common technique to manipulate users into providing sensitive information.

Although this domain is now marked as taken down, PhishDestroy has actively reported it and ensured it was blocklisted to prevent further misuse. Ongoing monitoring will help maintain security against any potential resurgence of this threat.