atttverriifcccatiooonnnn[.]webflow[.]io
“atttverriifcccatiooonnnn”
atttverriifcccatiooonnnn.webflow.io — Konten tidak tersedia. Peniruan identitas merek: AT&T; Jenis penipuan: Generic Phishing. Ringkasan bukti: VirusTotal 15/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); URLScan malicious verdict; Google Safe Browsing flagged; PhishDestroy score 95/100. Registrar: MarkMonitor.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain atttverriifcccatiooonnnn.webflow.io was created on May 08, 2013 and is currently marked as offline. Technical inspection shows it is hosted behind Cloudflare, using the nameservers journey.ns.cloudflare.com and lamar.ns.cloudflare.com, and resolves to the IPv6 address 2606:4700:440c::ac40:9708, which belongs to AS13335 Cloudflare, Inc. in the United States. The site presented a page title identical to the domain name – "atttverriifcccatiooonnnn" – and returned an HTTP 404 status code when accessed. SSL termination is provided by Google Trust Services under the WE1 certificate, indicating a valid TLS chain.
Detection data reveal that 15 out of 95 security vendors on VirusTotal flagged the domain, and it appears on a single security blocklist. Google Safe Browsing has classified the site as a social engineering threat, and the domain is listed as blocked by the PhishDestroy service. Registration information indicates the domain was acquired through MarkMonitor, Inc., a registrar commonly used for legitimate brand protection. The campaign is identified as a brand impersonation targeting AT&T, consistent with the declared threat type.
While the presence of Cloudflare and a legitimate certificate may reduce superficial suspicion, the combination of multiple vendor detections, Safe Browsing flag, and blocklist entry confirms malicious intent. Defenders should continue to block the IP address 2606:4700:440c::ac40:9708 at the network perimeter, enforce URL filtering for the fully qualified domain, and monitor for any re‑registration attempts. Additional investigation is warranted to determine whether other subdomains or related infrastructure are being leveraged for similar impersonation attempts, but no further content details are presently available.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 2 identified
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive