onlinemsn76589[.]weebly[.]com

This domain, onlinemsn76589.weebly.com, was registered on February 21, 2026 through Squarespace Domains II LLC and is hosted on the Weebly infrastructure (AS27647). DNS resolution points to 74.115.51.9, which is a Weebly‑owned address located in the United States. The authoritative nameservers are ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, and ns-646.awsdns, indicating that the domain is served via Amazon Route 53 DNS. The site is fronted by Cloudflare and presents a valid Let's Encrypt certificate (E8), demonstrating that TLS termination is functional. An HTTP request returns a 404 status and the page title reported is “Un instant…”, which provides no indication of a legitimate service.

The domain is listed on a single security blocklist and has been actively blocked by PhishDestroy. VirusTotal analysis shows that 14 of 93 scanning engines have flagged the domain as malicious, reinforcing the suspicion of phishing activity. The current operational status is offline, which may be the result of takedown actions or hosting changes. Evidence confirms the presence of phishing‑related indicators, but the exact payload, target brand, or victim‑interaction flow has not been observed because the site is not reachable. Consequently, the precise phishing scenario (e.g., credential harvesting, malware delivery) remains uncertain.

Defenders should continue to treat any traffic to this host as hostile. Recommended actions include adding the domain and its IP address to internal deny lists, confirming that existing web‑filter and DNS security solutions are blocking the domain, and monitoring for any related subdomains or newly registered Weebly‑hosted names that exhibit similar characteristics. Because the certificate is valid, relying solely on TLS validation is insufficient; reputation‑based controls must remain in place. Ongoing observation of the blocklist status and periodic re‑scans are advised to detect any re‑appearance.