https://dashboard.att.id/login

Impersonating AT&T

Intent: Credential collection

• Domain is not operated by AT&T
• Domain name closely resembles AT&T's real domain
• TLS certificate has no organization information
• Domain not registered through AT&T's usual registrar
• SPF record does not reference AT&T's infrastructure

login page with email and password fields for ATT dashboard access