telstraaaaawebmaillller[.]weebly[.]com

The domain telstraaaaawebmaillller.weebly.com was created on March 29, 2006 and is registered through Safenames Ltd. It resolves to the IP address 74.115.51.9, which belongs to the United States and is associated with AS27647 Weebly, Inc. The hosting environment is fronted by Cloudflare, as indicated by the detected technology fingerprint, and the TLS certificate presented is a Let’s Encrypt E8 certificate, confirming that the site uses a valid, publicly‑trusted HTTPS certificate. The site returns an HTTP 404 status, and the only visible page element captured is the title "Telstra," matching the declared brand target. The domain is listed on a single security blocklist and has been flagged by 14 of 95 security vendors on VirusTotal, demonstrating moderate consensus among detection engines that the site is malicious.

It is currently taken offline and has been blocked by the PhishDestroy feed, reinforcing the assessment that the site was being used for credential phishing against Telstra customers. Nameserver configuration includes four AWS Route 53 name servers (ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, ns-646.awsdns). The combination of brand impersonation, a Telstra‑related page title, and the credential‑phishing classification suggests the site was designed to harvest login credentials by masquerading as a legitimate Telstra portal.

While the HTTP 404 response indicates that the primary landing page is no longer serving content, the historical evidence of malicious activity remains. Defenders should continue to block the domain at network perimeter filters, update URL reputation lists, and monitor for any related phishing campaigns that reference the Telstra brand. Additional investigation of any residual DNS records or cached content may reveal further indicators of compromise, but the current evidence is sufficient to justify a high‑confidence classification of the domain as a credential‑phishing site targeting Telstra users.