at7t-107697[.]weeblysite[.]com

On 24 July 2026, at7t-107697.weeblysite.com was observed as an offline site that had previously hosted a generic phishing page identified by the title “Nur einen Moment…”. The domain resolves to 74.115.51.54, an address owned by AS27647 (Weebly, Inc.) located in the United States. DNS is served by four Amazon Route 53 nameservers (ns-1375.awsdns-43.org, ns-1854.awsdns-39.co.uk, ns-510.awsdns-63.com, ns-522.awsdns). The SSL certificate presented is issued by Google Trust Services under the WE1 intermediate, confirming the use of Google‑managed TLS for the site.

The hosting stack includes Amazon Web Services and Cloudflare, indicating a typical CDN‑accelerated configuration. The domain was registered on 19 December 2012 through Safenames Ltd and carries a Scamadviser trust score of 1/100. It appears on a single security blocklist and has been flagged by 15 of 95 VirusTotal scanners. PhishDestroy has also listed the site as blocked.

An HTTP request to the domain returns a 404 status code, consistent with the current offline state. Evidence points to a short‑lived phishing infrastructure that leveraged a Weebly sub‑domain and standard cloud services to host malicious content. Because the site is no longer reachable, immediate mitigation focuses on ensuring that any cached URLs are removed from internal blocklists and that threat‑intel feeds are updated to reflect the offline status. Defenders should continue to monitor the IP address 74.115.51.54 for potential re‑use, verify that related DNS records are not resurrected, and apply standard web‑filtering rules for Weebly‑hosted subdomains exhibiting similar characteristics.