dgfhh384hsu48673[.]weebly[.]com

Analysis of the domain dgfhh384hsu48673.weebly.com indicates it was actively used for brand impersonation targeting Telstra, a telecommunications provider. The domain, registered on March 29, 2006, was taken offline by July 23, 2026, but infrastructure and detection data provide clear evidence of its malicious purpose. Fifteen of ninety-five security vendors on VirusTotal flagged the domain, confirming its classification as a phishing threat. The page title 'Home' suggests a generic entry point, though the exact content remains unanalyzed due to its offline status. The domain resolved to IP 74.115.51.9, hosted by Weebly, Inc. (AS27647) in the United States, and employed Cloudflare for traffic routing.

Nameservers under AWS (ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, and ns-646.awsdns) were configured, a common setup for both legitimate and malicious sites. The registrar, Safenames Ltd, is not inherently suspicious but has been associated with other abusive domains. A Scamadviser trust score of 1/100 further corroborates the domain's fraudulent nature, and it appeared on at least one security blocklist, with PhishDestroy explicitly blocking it. The SSL certificate, issued by Let's Encrypt, is standard for phishing sites due to its free and automated issuance.

The HTTP 404 status confirms the domain is no longer serving content, though this does not eliminate the risk of re-emergence. Defenders should treat this domain as confirmed malicious, particularly for Telstra-themed phishing campaigns. Historical DNS and WHOIS records should be preserved for forensic analysis, and security teams are advised to monitor for re-registration or reuse of the same infrastructure. While the domain is offline, the underlying hosting provider and nameserver configuration may still pose risks if repurposed for future attacks.