jantyyo[.]weeblysite[.]com

Analysis of jantyyo.weeblysite.com as of 23 July 2026 indicates that the domain is classified as a high‑risk generic phishing site. The domain was registered on 19 December 2012 through Safenames Ltd and is hosted on Amazon Web Services infrastructure, as evidenced by the presence of AWS nameservers (ns-1375.awsdns-43.org, ns-1854.awsdns-39.co.uk, ns-510.awsdns-63.com, ns-522.awsdns). The authoritative DNS resolves to the IP address 74.115.51.55, which belongs to AS27647, owned by Weebly, Inc., and is geolocated in the United States. The site employed Cloudflare as a front‑end service and presented an SSL certificate issued by Google Trust Services under the WE1 designation, confirming TLS termination. HTTP probing returns a 404 status, and the page title reported by crawlers is “Nur einen Moment…”.

Google Safe Browsing flags the URL for social engineering, and the domain appears on a single security blocklist. PhishDestroy has taken the site offline, and the current status is reported as offline. VirusTotal analysis shows that 14 of 95 scanned security vendors flagged the domain, reinforcing the malicious assessment. No additional malware or payload information is available, and the exact phishing content has not been captured.

Given the combination of reputable blocklist inclusion, Safe Browsing warning, and multi‑vendor VirusTotal detections, the indicator should be treated as confirmed malicious. Defenders should block the domain at network perimeter, add the IP address 74.115.51.55 to deny‑list policies, and monitor DNS queries for the listed nameservers. Organizations should also verify internal logs for any recent connections to the IP address or TLS certificate fingerprint to identify possible compromise attempts. Continuous re‑evaluation is advised in case the hosting infrastructure changes or new detections appear.