my-site-104756-107428[.]weeblysite[.]com

This domain, my-site-104756-107428.weeblysite.com, is identified as a credential theft operation designed to harvest user login credentials through deceptive web forms. Analysis indicates no direct association with a specific brand impersonation or crypto drainer kit, though the infrastructure aligns with known credential harvesting campaigns. The page title, 'Home | ........', suggests an attempt to mimic a legitimate landing page while concealing malicious intent behind minimal content. Infrastructure analysis reveals multiple technical indicators of compromise. The domain is flagged by 18 out of 95 security vendors, with detection signatures pointing to credential theft behavior. It is registered through SafeNames Ltd. and resolves to the IP address 74.115.51.54, hosted on AS27647 (Weebly, Inc.) in the United States. The domain was created on March 07, 2026, an anomalous future date that may indicate domain spoofing or registry manipulation. The SSL certificate is issued by Google Trust Services (WE1), a common choice for both legitimate and malicious sites. The domain appears on one security blocklist and is actively blocked by anti-phishing systems. Current status indicates the domain has been taken offline, likely in response to detection and reporting. However, residual risk remains due to the potential for infrastructure reuse or migration to new domains under the same threat actor. Users who interacted with this domain should immediately reset credentials for any accounts accessed during the exposure window. Organizations are advised to monitor for similar domains leveraging the Weebly hosting platform, particularly those with future-dated registrations or minimal page content. Proactive blocking of the resolved IP (74.115.51.54) and related AS27647-hosted domains is recommended to mitigate further credential theft attempts.