my-site-102586-100459[.]weeblysite[.]com

This domain is flagged as an elevated-risk brand impersonation site targeting BT, a major telecommunications provider. The threat involves credential theft, where attackers mimic legitimate BT login portals to harvest user account details, including usernames, passwords, and potentially multi-factor authentication codes. Such attacks often lead to unauthorized account access, financial fraud, or further exploitation through social engineering tactics. Analysis indicates the domain my-site-102586-100459.weeblysite.com was registered on February 21, 2026, through registrar SafeNames Ltd. It resolves to the IP address 74.115.51.54, hosted on autonomous system AS27647 (Weebly, Inc.) in the United States. The domain appears on one security blocklist and is flagged by 18 out of 95 security vendors on VirusTotal, with PhishDestroy marking it as malicious. The SSL certificate is issued by Google Trust Services (WE1), a common tactic to lend false legitimacy. The page title, 'Home | ..', suggests an attempt to replicate a generic BT landing page, further supporting the credential theft objective. Mitigation for this specific threat type requires immediate action from both end users and network defenders. Users who may have interacted with the domain should reset BT account credentials, enable multi-factor authentication if not already active, and monitor accounts for unauthorized activity. Network administrators are advised to block the domain and its resolving IP (74.115.51.54) at the perimeter, along with implementing detection rules for similar Weebly-hosted subdomains impersonating BT. Organizations should also conduct retrospective log analysis to identify any prior interactions with the domain, particularly from corporate networks. Given the domain's current offline status, continuous monitoring for re-emergence or related infrastructure is recommended.