attmailcenter-106813[.]weeblysite[.]com

This domain, attmailcenter-106813.weeblysite.com, operates as a credential harvesting phishing platform specifically designed to impersonate telecommunications service login portals. Analysis of the page title, 'Login Screen | AT&T,' confirms the intent to deceive users into submitting sensitive authentication credentials, including usernames, passwords, and potentially multi-factor authentication tokens. The infrastructure mimics legitimate service provider interfaces, increasing the likelihood of successful social engineering attacks against unsuspecting customers. Infrastructure analysis reveals multiple high-confidence indicators of compromise. The domain, registered through Safenames Ltd on December 19, 2012, resolves to IP address 74.115.51.54, hosted on autonomous system AS27647 (Weebly, Inc.) in the United States. Detection engines report 18 out of 95 security vendors flagging the domain as malicious on VirusTotal, while two independent security blocklists have listed the resource. The SSL certificate, issued by Google Trust Services under the common name 'WE1,' does not mitigate the inherent risk, as phishing operators frequently leverage valid certificates to enhance legitimacy. Users who accessed attmailcenter-106813.weeblysite.com should immediately invalidate any credentials entered on the platform. Account holders are advised to initiate password resets through official service provider channels, enable multi-factor authentication where available, and monitor accounts for unauthorized activity. System administrators should update local blocklists to include the domain and associated IP address 74.115.51.54. Given the domain's historical registration and persistent phishing classification, organizations should treat any interaction with this resource as a potential security incident requiring immediate remediation.