oeze5y57b26xn8zk[.]umso[.]co

This report details a domain assessed as a telecom scam impersonating AT&T. The page title "Page not Found" suggests the site was either taken down or configured to display a default error page, obscuring its intended fraudulent content. The threat involves deceiving users into believing they are interacting with AT&T, likely for credential theft or financial fraud.

Technical evidence confirms malicious classification. VirusTotal reports 17 out of 95 detections, with flags from ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, and ESET. The domain is registered with Name.com, Inc., created on 2020-08-31, and resolves to IP 75.2.96.155 (US, AS16509 Amazon.com, Inc.). SSL is issued by Let's Encrypt (R12). Nameservers are ns-1432.awsdns-51.org, ns-15.awsdns-01.com, ns-1794.awsdns-32.co.uk, and ns-900.awsdns-.

The site is currently DOWN/OFFLINE, indicating it is not actively serving content. Despite being offline, the domain remains on 2 blocklists. The risk level is high due to confirmed telecom impersonation and multiple security vendor flags, though immediate exploitation is mitigated by its offline status.