gkiol-0ftrd[.]weebly[.]com

The domain gkiol-0ftrd.weebly.com was registered on February 21, 2026 through Squarespace Domains II LLC and is hosted on the Weebly infrastructure identified as AS27647 (Weebly, Inc.) in the United States. DNS resolution points to the address 74.115.51.9, which is served by Cloudflare and presents a valid Let's Encrypt certificate (issuer E8). An HTTP request to the root URL returns a 404 status code, and the site is currently taken offline, confirming the reported offline status. The page title returned by the server is "Home," but no additional page content has been captured.

Security telemetry shows the domain appears on a single blocklist and has been flagged by PhishDestroy. VirusTotal analysis recorded 17 detections out of 93 scanning engines, indicating a consensus among multiple vendors that the domain is malicious. The authoritative name servers are ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, and ns-646.awsdns.

While the evidence confirms the domain’s involvement in a generic phishing campaign, the exact payload or target page cannot be verified because the site is offline and returns only a 404 response. Defenders should continue to block the domain at perimeter and endpoint filters, add the IP address 74.115.51.9 to reputation lists, and monitor for any resurgence of the domain or reuse of the associated nameserver set. Ongoing surveillance of similar Weebly‑hosted subdomains and rapid sharing of detection signatures with threat intelligence platforms are recommended to mitigate potential re‑use of this infrastructure in future phishing operations.