btuhuytrhicf6sihsw[.]weeblysite[.]com

The domain btuhuytrhicf6sihsw.weeblysite.com is listed on one public security blocklist and received 12 detections out of 95 scanners on VirusTotal, indicating that multiple security vendors have observed malicious activity associated with the host. DNS resolution points to IP address 74.115.51.54, which is owned by AS27647 Weebly, Inc. in the United States and is served through Amazon Web Services infrastructure behind Cloudflare’s edge network. The TLS certificate presented is issued by Google Trust Services under the WE1 label, showing a valid certificate chain but offering no assurance of the site’s legitimacy. HTTP probing returned a 404 status, and the site has been taken offline, as confirmed by PhishDestroy’s blocklist entry.

The registrar is Safenames Ltd, and the domain was created on December 19, 2012, giving it a long registration history. Nameserver delegation uses four AWS Route 53 nameservers (ns-1375.awsdns-43.org, ns-1854.awsdns-39.co.uk, ns-510.awsdns-63.com, ns-522.awsdns), a pattern common to many legitimate and compromised sites. Scamadviser assigns a trust score of 1 / 100, reflecting a high‑risk assessment.

The page title observed was "Home | btuhuytrhicf," and the threat classification is brand impersonation targeting BT, as indicated in the supplied intelligence. While the current offline state prevents direct analysis of page content, the combination of blocklist presence, multiple vendor detections, low trust score, and the brand‑impersonation tag strongly suggests previous malicious use. Defenders should block the domain at network perimeters, add the associated IP to threat‑intel feeds, monitor DNS queries for this host, and share the indicators with upstream security platforms to prevent any future re‑use of the infrastructure for BT‑related scams.