nstutqucbooks[.]weebly[.]com

This domain, nstutqucbooks.weebly.com, is identified as a credential harvesting phishing site targeting users through a generic login portal. Analysis of the page structure and content indicates an attempt to mimic legitimate login interfaces, though no specific brand impersonation was confirmed. The site employs a basic phishing kit designed to capture user credentials submitted via web forms, likely for subsequent account compromise or fraudulent transactions. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Squarespace Domains II LLC, an uncommon registrar choice for phishing activity. It resolves to the IP address 74.115.51.8, hosted on AS27647 (Weebly, Inc.) in the United States. The domain is flagged by 19 out of 95 security vendors on VirusTotal, with one additional security blocklist listing. The site uses a Let's Encrypt SSL certificate (serial number E8), a common tactic to lend false legitimacy to phishing pages. No Google Safe Browsing (GSB) detection was recorded at the time of analysis. The domain is currently offline, likely taken down following detection or abuse reporting. While no longer active, the infrastructure remains a residual risk due to potential reuse or repurposing. Organizations are advised to block the domain and associated IP at perimeter security controls. Users who may have interacted with the site should reset credentials for any accounts entered, particularly if reused across platforms. Continuous monitoring of Weebly-hosted subdomains is recommended due to the platform's recurring exploitation in phishing campaigns.