bellsouth-att-signing-c0218f[.]webflow[.]io

The domain bellsouth-att-signing-c0218f.webflow.io is currently active and is associated with phishing attempts, impersonating the legitimate services of AT&T. With a VirusTotal detection score of 15 out of 95, it raises significant concerns regarding its legitimacy. Scamadviser rates the site as 'Very Likely Unsafe' with a trust score of 1, indicating a high likelihood of fraudulent activity. The site employs a hidden WHOIS identity and utilizes a free development platform, further implicating it as a phishing vehicle.

Registered through MarkMonitor, Inc., this domain is over 12 years old, which is atypical for phishing sites, yet it boasts only a low traffic rank. The presence of iframe elements within the site aligns with common phishing tactics to mask content and trap user credentials. PhishDestroy has reported the domain and is actively monitoring its status, which has seen 2 blocklist entries. Immediate reporting and monitoring efforts are crucial to mitigate potential user compromise associated with this phishing threat.