Security Scan: Login Screen

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8f287b8c-56aa-41d3-9ad1-3176d65f3fc7 Domain and IP registration (RDAP)/api/v1/rdap/8f287b8c-56aa-41d3-9ad1-3176d65f3fc7How often this domain was scanned/api/v1/domain/stats/attwebupdate4085j483hj392.framer.ai Scan history for this domain/api/v1/domain/history/attwebupdate4085j483hj392.framer.ai?limit=15

This website contacted 17 IPs in 2 countries across 6 domains to perform 27 HTTP transactions. The main domain is framer.ai and was registered 8 years ago.

Submitted URL: https://attwebupdate4085j483hj392.framer.ai

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Fake AT&T sign-in page on a throwaway framer.ai subdomain that harvests AT&T Mail/Currently.com credentials — do not enter a User ID or password.

Risk Factors (4)

Impersonation of AT&T's login on a non-AT&T domain

Password field harvesting credentials on a free shared hosting subdomain

Domain age is the Framer platform's (2018), not this page's — the page itself is of unknown/very recent origin

Unranked domain (not in Cisco Umbrella top 1M) while claiming a major telecom brand

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: -631039032

MD5: ba7479f92cf34345567552f15353e851

Domain Name Analysis

You're looking at domain 'attwebupdate4085j483hj392.framer.ai' on the Anguillan country-code top-level domain (.ai) and includes subdomain 'attwebupdate4085j483hj392'. Count 6 characters in 'framer' containing two vowels alongside four consonants. Word splitting yields 1 word: framer. No strong language cues emerged from the frequency lists.

Screenshot

ZS AT&T Sign in to access AT&T Mail and Currently.com User ID Password Forgot user ID? Don't have a user ID? Create one now Legal policy center Privacy policy Terms ofuse Accessibility ntellec...

Page Load Overview

0.95s

Total Load Time

384 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:55%

Script:Latin

Direction:ltr

Detection Details

Text Length:135 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software50% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

50%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	31.43.161.6Aws · CLOUD	Netherlands	AS16509Amazon.com, Inc.
1	31.43.160.6Aws · CLOUD	Netherlands	AS16509Amazon.com, Inc.
1	18.64.211.76Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	143.204.181.93Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	65.9.130.104Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	65.8.131.117Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	18.64.211.99Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	143.204.181.49Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	143.204.181.70Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	143.204.181.40Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
27	17	-	-