l0gmntb000[.]weebly[.]com

Analysis as of July 23, 2026 indicates that l0gmntb000.weebly.com is associated with a generic phishing campaign and is currently offline. The domain was registered on March 29 2006 through Safenames Ltd and is hosted on the Weebly infrastructure (AS27647) in the United States. DNS resolution points to the address 74.115.51.8, which is served behind Cloudflare and presents a valid Let’s Encrypt certificate (issuer E8). An HTTP request returns a 404 status and the page title is observed as “Just a moment…”, suggesting that the site no longer serves content.

The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service. VirusTotal scans show that 13 of 95 security vendors have flagged the domain, reinforcing the suspicion of malicious use. Nameserver records list ns‑123.awsdns‑15.com, ns‑1500.awsdns‑59.org, ns‑1797.awsdns‑32.co.uk and ns‑646.awsdns, all belonging to Amazon’s Route 53 service, which is commonly used for dynamic hosting. The combination of a legacy registration date, active Cloudflare front‑end, valid TLS certificate, and multiple vendor detections aligns with typical phishing infrastructure that leverages reputable hosting to evade early detection.

At present, the site returns no payload, so the exact phishing vector (e.g., credential‑stealing page) cannot be confirmed. Defenders should continue to block the domain at perimeter defenses, monitor for any resurrection of the host, and consider adding the IP address 74.115.51.8 to threat‑intel feeds. Ongoing observation of the associated nameservers and any future VirusTotal submissions is recommended to capture potential re‑activation.