telllstraaadminnn[.]weebly[.]com

The domain telllstraaadminnn.weebly.com is identified as a generic phishing infrastructure impersonating Telstra, a major telecommunications provider. This domain is currently offline but was actively used to deceive users into submitting sensitive credentials through fraudulent login interfaces designed to mimic legitimate Telstra services. Analysis indicates the site specifically targeted customers of the brand, likely through email or SMS-based phishing campaigns directing victims to the malicious URL. Infrastructure analysis reveals the domain resolves to the IP address 74.115.51.9 and was originally registered on March 29, 2006, though the phishing content appears to have been deployed more recently. The domain is flagged by 16 of 95 security vendors on VirusTotal, with detections including phishing and malicious site classifications. It also appears on one security blocklist, further corroborating its malicious intent. The SSL certificate is issued by Let's Encrypt (serial number YE1), a common tactic among threat actors to lend superficial legitimacy to phishing pages. The domain is registered through MarkMonitor, Inc., a registrar frequently utilized for both legitimate and malicious domains. Current status indicates the domain has been taken offline, likely due to detection and remediation efforts. However, the infrastructure remains a documented threat, and similar domains may emerge using comparable tactics. Users who accessed this domain are advised to reset any credentials entered on the site, particularly Telstra account passwords, and enable multi-factor authentication where available. Organizations should update security controls to block the domain and associated IP address (74.115.51.9) at the network level. Monitoring for related phishing campaigns impersonating Telstra or other telecommunications providers is recommended, as threat actors often reuse infrastructure or themes across multiple incidents.