support-uphold-cdn-auth[.]weebly[.]com

The domain support-uphold-cdn-auth.weebly.com is currently classified as a high‑risk generic phishing site. Analysis shows that 17 of 91 security vendors on VirusTotal have flagged the domain, indicating a broad consensus of malicious intent. The domain appears on three external blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing its reputation as a threat vector. Google Safe Browsing has categorized the site under social engineering, which aligns with the phishing designation.

Registration data reveals that the domain was created on 29 March 2006 and is registered through MarkMonitor, Inc., a registrar often associated with legitimate enterprise domains, suggesting that the attacker may be exploiting the perceived trust of an established registrar. The authoritative name servers are ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, and ns-646.awsdns, all belonging to Amazon Route 53, indicating that the infrastructure is hosted on AWS. DNS resolution points to the IP address 74.115.51.9, an address that has been observed in prior malicious activity reports, though no additional context about the hosting environment is presently available.

No public SSL certificate details, HTTP status codes, or page title information have been published, leaving the exact content of the site unverified. Defenders should treat the domain as hostile: block the fully qualified domain name at perimeter firewalls, add the resolving IP address to network‑level deny lists, and monitor for any outbound connections to the identified AWS name servers. Continuous re‑scanning on VirusTotal and inclusion in threat‑intel feeds are recommended to capture any evolution in detection counts or additional vendor assessments.