# xxx565xx90-9.weebly.com — MALICIOUS

> xxx565xx90-9.weebly.com is flagged for phishing with high risk. Stay alert and avoid sharing sensitive info on this active domain.

## Summary
PhishDestroy identifies xxx565xx90-9.weebly.com as a high-risk generic phishing domain. Classified under phishing threats, this domain attempts to deceive users by mimicking legitimate sites to steal credentials or personal data. Its suspicious pattern and behavior align with common phishing tactics, raising significant security concerns.

Technically, this domain resolves to IP address 74.115.51.8 and was registered on March 29, 2006, through Safenames Ltd. It is currently active and has been flagged by 18 out of 95 security vendors on VirusTotal. Additionally, it appears on two security blocklists, indicating ongoing malicious activity. The domain’s use of the Weebly subdomain platform adds to its potential for abuse due to ease of setup and anonymity.

The domain remains active with no indication of takedown or remediation efforts. Users and organizations are advised to exercise caution and avoid interacting with it. PhishDestroy recommends monitoring security tools for alerts related to this domain and updating blocklists to prevent exposure. Immediate action to block and report this domain can help mitigate risks associated with its phishing campaigns.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Page title: poczta onet - Home

## Domain Intelligence
- Registered: 2026-03-04 15:07:01
- Registrar: Safenames Ltd
- IP: 74.115.51.8
- Nameservers: ns-123.awsdns-15.com ns-1500.awsdns-59.org ns-1797.awsdns-32.co.uk ns-646.awsdns-16.net

## Detection Status
- VirusTotal: 19 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Emsisoft", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Gridinsoft", "Kaspersky", "Lionic", "MalwareURL", "Netcraft", "OpenPhish", "Sophos", "Trustwave", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content
- Meta description: poczta onet
- Meta title: poczta onet

### Page Text
poczta onet - Home poczta onet Home About Me Blog Contact Adres e-mail: * Hasło: * Zalogować się Home About Me Blog Contact script>
document.addEventListener('DOMContentLoaded', function() {
var element = document.getElementById("weebly-footer-signup-container-v3");
element.parentNode.removeChild(element);
}, false); Powered by Create your own unique website with customizable templates. Get Started

### External Scripts
- https://www.google.com/recaptcha/api.js?_=1773518254296
- https://ssl.google-analytics.com/ga.js
- https://cdn11.editmysite.com/js/jquery-1.8.3.min.js

### Form Fields
- wsite_subject
- form_version
- ucfid
- submit
- _u568558416870071413
- hidden
- recaptcha_token
- _u657151195885341211
- wsite_approved
- text

### External Links
- https://www.weebly.com/signup?utm_source=internal&utm_medium=footer

## Evidence
- Screenshot: https://i.ibb.co/MxBzPMS5/963d0711a7a7.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/bf86c8e4-7153-4339-a042-7b82160b390c
- PhishDestroy: https://phishdestroy.io/domain/xxx565xx90-9.weebly.com/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/xxx565xx90-9.weebly.com/
Last updated: 2026-03-14