smtptelstrawebmailplusviewswifts[.]framer[.]website
“Sign in with your Telstra ID”
smtptelstrawebmailplusviewswifts.framer.website — Konten tidak tersedia (HTTP 404). Peniruan identitas merek: Telstra; Jenis penipuan: Credential Phishing. Ringkasan bukti: VirusTotal 13/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); URLQuery 100 det.; URLScan malicious verdict; Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 95/100. Registrar: CSC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Technical Threat Report: smtptelstrawebmailplusviewswifts.framer.website
This site is a phishing page that impersonated the Telstra brand, presenting a login form titled "Sign in with your Telstra ID." The threat posed is credential theft, targeting Telstra customers through an email-based scam. Users who entered their credentials on this page would have had their Telstra ID and password stolen by the threat actor.
Technical evidence confirms the malicious nature of the domain. VirusTotal analysis shows 13 out of 95 security vendors flagged the site as malicious, with detections from ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, and ESET. The domain is registered with CSC Corporate Domains, Inc., was created on 2021-11-19, and resolves to IP address 35.71.142.77 in the United States, hosted on AS16509 (Amazon.com, Inc.). The site uses an SSL certificate issued by Let's Encrypt with fingerprint E7. Nameservers are ns-1243.awsdns-27.org, ns-1818.awsdns-35.co.uk, ns-336.awsdns-42.com, and ns-792.awsdns. The domain appears on two blocklists.
The site is currently offline and not accessible. However, the domain remains registered and could be reactivated. The risk level for users who previously visited and submitted credentials is high, as their Telstra login information is compromised. Telstra customers should change passwords immediately if they entered data on this page.
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 4 identified
JavaScript library for building user interfaces with component-based architecture.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive