earlier-concept-180784[.]framer[.]app

This domain, earlier-concept-180784.framer.app, is confirmed to operate as a credential phishing site targeting Telstra customers. The page presents a fraudulent login interface with the title 'Sign in with your Telstra ID,' designed to deceive users into submitting their account credentials. Infrastructure analysis reveals the domain was configured to mimic legitimate Telstra authentication portals, a common tactic in credential harvesting campaigns. Evidence supporting this assessment includes multiple technical indicators. The domain was registered through CSC Corporate Domains, Inc. on October 02, 2020, and resolves to the IP address 35.71.142.77, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. Security validation shows 18 out of 95 vendors on VirusTotal flagged the domain as malicious, while two independent security blocklists have listed it for phishing activity. The SSL certificate, issued by Let's Encrypt (serial number E7), does not mitigate the malicious intent, as threat actors frequently use valid certificates to lend false legitimacy to phishing sites. Users who visited earlier-concept-180784.framer.app and entered credentials should immediately reset their Telstra account passwords through the official portal. Multi-factor authentication should be enabled if not already active. Any devices used to access the site should undergo a security scan to detect potential malware or unauthorized access. Organizations are advised to block the domain and associated IP (35.71.142.77) at the network perimeter to prevent further exposure. Monitoring for unusual account activity is recommended, as compromised credentials may be used in subsequent fraud or identity theft attempts.