bellverify-0d5803.webflow.io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of bellverify-0d5803.webflow.io
This domain appears to be a page hosted on the Webflow platform rather than an official standalone corporate website. The page title is "bellverify," and the screenshot shows BellSouth and AT&T branding alongside a login form requesting an email address or user ID and password. It also includes a short informational section about BellSouth, suggesting the page is presenting itself as related to telecommunications account access or verification.
Based on the visible content, the page may be attempting to imitate a BellSouth or AT&T-related sign-in experience. BellSouth is a legacy telecommunications brand associated with AT&T, but this page is hosted on a webflow.io subdomain rather than a clearly branded official domain. That mismatch, combined with the credential-entry form and reused brand imagery, suggests the site may be designed to collect account credentials rather than provide a legitimate customer service function.
Safety Assessment for bellverify-0d5803.webflow.io
The scan results indicate a high level of concern at the time of this scan. The domain was flagged by 18 out of 91 security engines, with multiple detections describing the page as phishing or malicious. In addition, it was listed by major threat databases for social-engineering activity, which materially increases the likelihood that the page is being used to deceive visitors into submitting sensitive information.
The visible page content also raises strong credibility concerns. It presents BellSouth and AT&T branding on a third-party hosting subdomain, includes a login form for email credentials, and shows a sparse, inconsistent layout that does not resemble a polished official account portal. While the malware scan did not detect malicious files, phishing pages often rely on deceptive page design rather than downloadable malware, so a clean file scan does not offset the broader reputation signals here.
Based on these findings, this website may pose potential risks to visitors, particularly anyone asked to enter login credentials or personal information.
Technical Description
The site uses a valid SSL certificate and is served through Cloudflare infrastructure, with hosting resolved to a Cloudflare IP in Canada. The certificate appears current, which means traffic may be encrypted in transit; however, valid HTTPS alone does not establish legitimacy. The page is hosted under a webflow.io subdomain, which is commonly used for quickly publishing temporary or low-friction web content.
DNSSEC appears to be unsigned, and the server stack is fronted by Cloudflare with standard external assets loaded from Webflow and related content-delivery domains. No malicious files or flagged external links were identified in the provided file-level scan, but the primary concern here appears to be social-engineering behavior rather than exploit delivery or malware hosting.
Share your experience with this website. Was it safe? Did you encounter any issues?