atttttt108068[.]weeblysite[.]com

This domain, atttttt108068.weeblysite.com, was identified as a phishing site designed to impersonate AT&T, a major telecommunications provider. The site likely presented a fraudulent login portal mimicking AT&T’s official authentication pages, aiming to deceive users into entering sensitive credentials such as usernames, passwords, or financial details. The page title, 'Home | Microsoft Account,' further suggests an attempt to exploit trust in well-known brands to increase the likelihood of successful credential theft. Such impersonation attacks are commonly used to facilitate account takeovers, unauthorized access to personal data, or financial fraud. Analysis indicates the domain was registered through SafeNames Ltd. on February 21, 2026, an unusual future date that may indicate falsified registration details or a typo. It resolved to the IP address 74.115.51.54, part of Weebly’s hosting infrastructure (AS27647), a platform frequently abused for phishing due to its ease of use and free hosting services. The domain was flagged by 18 out of 95 security vendors on VirusTotal, a clear indicator of malicious activity. Additionally, it appeared on one security blocklist and was taken offline, though its infrastructure remains a potential vector for future threats. The SSL certificate, issued by Google Trust Services, does not mitigate the risk, as phishing sites often use valid certificates to appear legitimate. Users who visited atttttt108068.weeblysite.com should take immediate action to secure their accounts. If any credentials were entered, change passwords for AT&T and any other accounts where the same login details may have been reused. Enable multi-factor authentication (MFA) on all critical accounts to add an extra layer of security. Monitor financial statements and account activity for signs of unauthorized access or transactions. Consider running a full scan of the device used to access the site to detect potential malware or keyloggers. Report the incident to AT&T’s official fraud reporting channels and, if applicable, to local cybersecurity authorities to aid in tracking and mitigating the threat.