norway-ship[.]weeblysite[.]com

The domain norway-ship.weeblysite.com is currently active and hosts a site titled “Home | Norway Ship”. Infrastructure analysis shows it resolves to IP 74.115.51.54, which belongs to AS27647 (Weebly, Inc.) and is geolocated in the United States. The SSL certificate is issued by Google Trust Services under the WE1 intermediate, indicating a valid HTTPS endpoint. DNS is served by four AWS name servers (ns-1375.awsdns-43.org, ns-1854.awsdns-39.co.uk, ns-510.awsdns-63.com, ns-522.awsdns). The site runs on a Weebly stack with MySQL, PHP, Vue.js, Cookiebot, and Cloudflare components. It is listed on two security blocklists (PhishDestroy, PhishingDB) and received 17 positive detections out of 95 scans on VirusTotal, contributing to a high‑risk rating. The domain impersonates Facebook, as indicated by the brand target field, and is classified as a social‑media phishing campaign. Defenders should immediately block DNS resolution and HTTP/S traffic to this host, add the IP address to network‑level deny lists, and monitor for any credential‑harvesting attempts that reference Facebook‑related URLs. Continuous re‑scanning is advised to capture any changes in the malicious payload, and any observed user reports should be escalated to incident response teams for containment.