bellsouth-att-sign-in-e259eb[.]webflow[.]io

The domain bellsouth-att-sign-in-e259eb.webflow.io is designed to impersonate BellSouth's login portal, making it a phishing threat targeting users' credentials. With a VirusTotal detection score of 14/95, this domain has been flagged as suspicious. Scamadviser rates it as 'Very Likely Unsafe' with a trust score of only 1, further corroborating its malicious intent.

This domain was registered through MarkMonitor, Inc., and has existed for over 12 years, but its deceptive nature is evident as it uses a free website platform and hides its owner's identity through a paid WHOIS service. The IP address 198.18.0.111 is associated with shared hosting, which is often used by scammers to mask their activities. Additionally, Scamadviser notes that the website does not garner much traffic and is being iframed by another site, indicating a lack of legitimate use.

As of now, the domain is marked as taken down, and PhishDestroy has reported it and blocklisted it to prevent further user exposure. Continuous monitoring will ensure that any new instances or variations are promptly addressed.