Pytt4mAT&T phishing attheip[.]net including 2FA attheip[.]net/factor.html . Targeting employees?
https://urlscan.io/result/6c9335f7-f7fc-4dc1-ac07-553dc4127dba/
And another one for AT&T https://urlscan.io/result/c88e8a27-c349-49e5-b6a2-e58f65a8baf7/
Targeting Asurion asurlon[.]net with what seems like the same phish kit https://urlscan.io/result/ee20fa0b-155a-48fa-aa55-1729ccdbcb9f/