broadatt-10[.]weeblysite[.]com

Analysis of the domain broadatt-10.weeblysite.com confirms its classification as an elevated-risk phishing site targeting AT&T customers. The domain, hosted on Weebly's infrastructure (AS27647), resolves to the IP address 74.115.51.55, located in the United States. Infrastructure analysis reveals the use of Amazon Web Services for hosting, with nameservers ns-1375.awsdns-43.org, ns-1854.awsdns-39.co.uk, ns-510.awsdns-63.com, and ns-522.awsdns, alongside Cloudflare for additional traffic routing. The domain was registered through Safenames Ltd on December 19, 2012, though its malicious activity appears to have surfaced more recently, as indicated by its current offline status and prior detection metrics.

As of the report date, the domain returns an HTTP 404 status, suggesting it has been taken down or suspended. However, prior to its deactivation, the site was flagged by 14 of 95 security vendors on VirusTotal, a detection rate consistent with confirmed phishing domains. It also appears on at least one security blocklist, further corroborating its malicious classification. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the domain's risk, as phishing sites frequently employ valid certificates to appear legitimate.

The page title, 'Home | broad,' provides limited insight into the site's exact content or structure, though the domain name and brand impersonation targeting AT&T strongly indicate an intent to deceive users into divulging sensitive information. No evidence of a specific phishing kit or additional scam categorization (e.g., credential harvesting, payment fraud) is present in the available data. Defenders should treat this domain as a confirmed threat vector, particularly for AT&T customers, and maintain its inclusion in blocklists until further forensic analysis can be conducted.