bellsouth-management-sv.webflow.io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of bellsouth-management-sv.webflow.io
This webpage appears to be a simple login portal hosted on a Webflow subdomain, using the title "Bellsouth Management Sv." The screenshot shows an email-and-password sign-in form alongside AT&T and BellSouth branding, suggesting that it is presenting itself as an account access page related to telecommunications or webmail services.
Based on the domain structure, this is not hosted on an official BellSouth or AT&T-owned primary domain, but rather on a third-party website-building platform subdomain. That setup may be inconsistent with how major telecommunications providers typically deliver customer authentication pages. No clear operator identity, company contact details, or supporting site content are visible in the provided page snapshot.
Safety Assessment for bellsouth-management-sv.webflow.io
This domain was flagged by 19 out of 91 security engines at the time of this scan, with multiple sources classifying it as phishing or fraud-related. In addition, one phishing-focused threat database listed the domain, and the page content shown in the screenshot appears to imitate AT&T/BellSouth branding while presenting a credential-entry form. That combination of branding, login collection, and third-party hosting may be consistent with a credential-harvesting setup rather than a legitimate customer portal.
Although the malware scan did not detect malicious files and the page uses valid HTTPS, those signals do not outweigh the broader phishing indicators in this case. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal on its own but still adds a small amount of caution. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served over HTTPS with a valid TLS certificate issued by Google Trust Services, fronted by Cloudflare infrastructure, and resolves to an IP address associated with Cloudflare hosting in Canada. The page also loads common static assets from Webflow and Cloudflare-related services, which is consistent with a site built on a hosted website platform.
DNSSEC appears to be unsigned, and the domain uses Cloudflare nameservers. While the transport security configuration appears functional, the more notable concern is the mismatch between the page's claimed branding and its hosting on a Webflow subdomain rather than an apparent official telecommunications domain.
Share your experience with this website. Was it safe? Did you encounter any issues?