222srrr[.]weebly[.]com

Analysis of the domain 222srrr.weebly.com confirms its classification as an active credential phishing site. The domain, hosted on Weebly's infrastructure (AS27647, IP 74.115.51.9, US), was registered on February 21, 2026, through Squarespace Domains II LLC. It remains operational with a 200 HTTP status, indicating an accessible endpoint. Google Safe Browsing has flagged the domain for social engineering, aligning with its observed page title 'Un instant…', a phrase commonly associated with intermediate or transitional phishing pages designed to delay victims while backend checks occur. Infrastructure reveals the use of Weebly’s platform alongside auxiliary technologies such as MySQL, PHP, Amazon Web Services, and Cloudflare, suggesting a hosted phishing kit rather than a fully custom deployment. The domain is listed on one security blocklist (PhishDestroy) and has been flagged by 19 of 93 security vendors on VirusTotal, though the specific nature of the phishing content remains unconfirmed due to lack of direct page analysis. The SSL certificate, issued by Let’s Encrypt, provides encryption but does not validate legitimacy. Defenders should treat this domain as high-risk. The combination of social engineering flags, active hosting, and blocklist presence justifies immediate blocking at network and endpoint levels. Further investigation into the backend infrastructure (e.g., AWS resources, Cloudflare configurations) may reveal additional related domains or command-and-control channels. No brand or service impersonation can be confirmed from available data; the exact phishing lure remains undetermined.