my-site-106647-102720[.]weeblysite[.]com

This domain, my-site-106647-102720.weeblysite.com, is identified as a brand impersonation threat targeting BT, a major telecommunications provider. The site employs deceptive tactics to mimic legitimate BT services, likely aiming to harvest user credentials, personal information, or financial details through fraudulent login portals or forms. Analysis of the domain's infrastructure and content reveals a deliberate attempt to exploit trust in the BT brand, presenting a significant risk to unsuspecting users who may be redirected or lured into interacting with the malicious page. Infrastructure analysis reveals the domain was registered through Safenames Ltd on December 19, 2012, though its malicious use appears recent. It resolves to the IP address 74.115.51.55, located within the United States under AS27647 (Weebly, Inc.). The domain is flagged by 19 out of 95 security vendors on VirusTotal, indicating a consensus among detection engines regarding its malicious nature. Additionally, it appears on one security blocklist, further corroborating its classification as a phishing threat. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the risk, as phishing sites commonly leverage valid certificates to appear legitimate. Users who have visited my-site-106647-102720.weeblysite.com or interacted with its content are advised to take immediate action. First, terminate any active sessions with the site and refrain from entering credentials or personal information. Next, scan local systems for malware or unauthorized access using updated security tools. If credentials were submitted, reset passwords for BT accounts and any other services where identical credentials may have been reused. Monitor financial statements and account activity for signs of unauthorized transactions. Organizations should review logs for connections to 74.115.51.55 and the domain itself, as these may indicate compromise or targeted phishing attempts within their networks.