telstracommunicationvalidationsystem[.]framer[.]website

This site, with the page title "Sign in with your Telstra ID," is a credential phishing website that impersonates the Telstra brand. The threat is that visitors may be tricked into entering their Telstra account credentials, which could then be stolen by the attacker for unauthorized access to the victim's account.

Technical evidence shows the site has 9 detections out of 95 VirusTotal vendors. It is flagged by ADMINUSLabs, alphaMountain.ai, CyRadar, ESET, and Forcepoint ThreatSeeker, and appears on 2 blocklists. The domain is registered with CSC Corporate Domains, Inc., and was created on 2021-11-19. The site is hosted on IP 35.71.142.77 in the United States, under AS16509 Amazon.com, Inc., and uses a Let's Encrypt SSL certificate with serial E7. Nameservers are ns-1243.awsdns-27.org, ns-1818.awsdns-35.co.uk, ns-336.awsdns-42.com, and ns-792.awsdns.

The site is currently DOWN/OFFLINE, which mitigates immediate risk. However, due to its phishing nature and multiple vendor detections, the risk level is assessed as high if it becomes active again. Users should avoid interacting with this domain.