telkomstorageupgrade[.]weebly[.]com

The domain telkomstorageupgrade.weebly.com is currently under investigation for credential harvesting phishing targeting users of Telkomsa, a well-known South African telecommunications company. This threat involves deceptive tactics designed to steal login credentials by impersonating the Telkomsa brand, as indicated by the page title 'Telkomsa'. The domain remains active and may pose a risk to unsuspecting users attempting to access Telkomsa services.

Technical analysis shows the domain was registered on March 29, 2006, and is registered through MarkMonitor, Inc., a reputable registrar. It resolves to the IP address 74.115.51.9 and employs a Let's Encrypt SSL certificate, potentially to give a false sense of security to visitors. VirusTotal scans currently show 0 detections out of 95 vendors, indicating that it has not yet been flagged by major antivirus engines. Despite this, the domain is not blocklisted currently but remains suspicious given its impersonation tactics and phishing intent.

The domain's status is active and under ongoing investigation. Users are strongly advised not to enter any personal or login information on this site. Security teams should monitor this domain for changes and consider blocking its IP address and domain in corporate environments until further intelligence confirms its safety. Reporting to anti-phishing organizations and updating endpoint detection rules are recommended to prevent potential credential theft incidents associated with this threat.