account-att-com-b94bef.webflow.io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of account-att-com-b94bef.webflow.io
This domain appears to be a Webflow-hosted page designed to resemble an AT&T account login screen. The page title references "account.att.com," and the screenshot shows AT&T and BellSouth branding alongside fields for an email address/user ID and password. Based on the visible content, the page is presenting itself as an account-access portal related to telecommunications services.
The underlying host is a webflow.io subdomain rather than an official att.com domain, which is a notable mismatch for a page requesting login credentials. The lower portion of the page includes brief informational text about BellSouth, suggesting the content may be intended to make the page look more credible rather than function as a standard corporate information site. Based on the domain structure and page presentation, it does not appear to be an official AT&T-operated property.
Safety Assessment for account-att-com-b94bef.webflow.io
Several security signals indicate elevated risk at the time of this scan. The URL was flagged by 9 out of 91 security engines, with multiple detections classifying it as phishing or otherwise malicious. In addition, the page visually imitates an AT&T login experience while being hosted on a third-party web-building subdomain, and the domain name closely references AT&T's account portal in a way that may mislead visitors.
Other scan components were less conclusive: the malware scan did not identify malicious files, and major threat databases checked here did not list the domain at the time of this scan. However, phishing pages often contain little or no malware and may rely instead on credential harvesting through deceptive branding and login forms. The combination of multi-engine phishing detections, brand-style presentation, and a non-official hosting location materially increases concern.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL certificate issued by Google Trust Services and is served through Cloudflare infrastructure at IP address 172.64.151.8, with hosting geolocated to Canada based on available IP data. The domain uses Cloudflare nameservers and the DNSSEC status is unsigned. SSL presence indicates encrypted transport, but it does not by itself verify that the page is legitimate.
The page appears to be hosted as a Webflow subdomain while presenting branding associated with a major telecommunications provider. That mismatch between hosting environment and claimed identity is a technical and trust concern, especially for a page collecting usernames and passwords. No malicious files or flagged outbound links were identified in the provided content scan, but the login-form behavior and branding pattern remain the more important indicators here.
Share your experience with this website. Was it safe? Did you encounter any issues?