Security Scan Report: att.framer.wiki

Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 2 countries across 6 domains to perform 27 HTTP transactions. The main domain is framer.wiki and was registered 4 years 12 months ago.

Submitted URL: https://att.framer.wiki/

AI Security Verdict

Low Risk

Confidence: 95%

3
Risk Score

This is the site's own sign-in page: the credential form submits to a host the operator controls, so the brand shown is their own rather than an impersonation of someone else.

Risk Factors (3)
Deceptive use of AT&T Mail and Currently.com branding
Hosted on a free website-builder subdomain rather than an official AT&T domain
Unranked subdomain while claiming to represent a major telecommunications brand
Safety Factors (3)
No threat-intelligence matches, JavaScript malware patterns, or network IDS alerts were detected.
The base registrable domain framer.wiki is established, but the att.framer.wiki subdomain is a user-created Framer site.
No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 9 to 3
Domain age information unavailable

Details

Page Title

AT&T

Scan Type

public

Domain Name Analysis

Within the .wiki top-level domain, 'att.framer.wiki' is registered with subdomain 'att'. The core label 'framer' covers 6 characters containing two vowels alongside 4 consonants. Splitting it apart reveals 1 word: framer. No strong language cues emerged from the frequency lists.

Screenshot

SaTEr Signin to access AT&T Mail and Currently.com E-mail Address Password Don't have a user ID? Create one now @ Made in Framer

Page Load Overview

0.76s
Total Load Time
382 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:208 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software71% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
71%
documentation technical
31%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1331.43.161.6Aws · CLOUDNetherlands
AS16509Amazon.com, Inc.
118.64.211.45Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1143.204.181.40Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
165.9.130.22Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
165.8.131.117Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
131.43.160.6Aws · CLOUDNetherlands
AS16509Amazon.com, Inc.
1143.204.181.93Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1143.204.181.49Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1143.204.181.70Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
118.64.211.73Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2715--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T104A321936119F064ACD7297EE75DF52C9D252140FF32C38BA2AE825F45CDAF42252B1C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:7o1BVxVPL3ItieSlkXesVkJVlat9VyalVbVe9V4wZthsQbaIMtVBG1l:GWKHsGMtPG1l

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:103752:YUZAFgOiTMGRUBKigMACbikiBKIAFAIRJCIASFLSYRAmsoCjDagonAAEiJCYEIDoKgIKm4xIxoGsMyQETAKgIoUERACFBdBQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7ffe7e7fffffe
Perceptual Hash:f38adc267689d922
Difference Hash:3228320c4d300400
Wavelet Hash:1b033f3f04043c3c
Color Hash:N/A

Other Hashes

Crop Resistant:3228320c4d300400

Scan History

Scan history not available

Unable to load historical scan data