mybtvoice-109770[.]weeblysite[.]com

Analysis of mybtvoice-109770.weeblysite.com indicates it is a brand impersonation domain targeting BT, currently offline as of July 23, 2026. The domain was created on December 19, 2012, and is hosted on Weebly's infrastructure, resolving to IP 74.115.51.55 (AS27647, Weebly, Inc., US). The SSL certificate is issued by Google Trust Services (WE1), a common provider for both legitimate and malicious sites. Technologies detected include Amazon Web Services and Cloudflare, suggesting the use of cloud-based hosting and CDN services.

The domain appears on one security blocklist (PhishDestroy) and was flagged by 15 of 95 security vendors on VirusTotal, though the specific detection categories are not detailed in available intelligence. The HTTP status returned is 404, and the page title was recorded as 'Home | MYBTVOICE,' which aligns with the reported scam type of brand impersonation targeting BT. The domain is registered through Safenames Ltd, and its nameservers are associated with AWS (ns-1375.awsdns-43.org, ns-1854.awsdns-39.co.uk, ns-510.awsdns-63.com, ns-522.awsdns). While the domain is currently offline, defenders should treat it as a confirmed brand impersonation threat.

Indicators such as the page title, blocklist inclusion, and vendor detections provide sufficient evidence to classify this domain as malicious. Organizations should monitor for any reactivation, block the domain at DNS and proxy levels, and investigate logs for prior connections from internal networks. No additional evidence of active campaigns or payload delivery is available at this time.