demolasthotmail[.]weebly[.]com

The domain demolasthotmail.weebly.com is flagged by 13 out of 91 vendors on VirusTotal, indicating a significant threat level. It was hosted on a US-based IP managed by Weebly, Inc. The domain was active since 2006 but was first detected by PhishDestroy as malicious in June 2026. The site is now offline, reducing immediate risk but underscoring the need for vigilance.

This domain was registered through MarkMonitor, Inc., a registrar often used by legitimate companies, which may have been part of an effort to lend credibility to the phishing operation. The domain utilized Let's Encrypt for SSL certification, a common choice for both legitimate and malicious sites due to its ease of access and cost-free nature.

Despite being taken down, demolasthotmail.weebly.com had a platform risk score of 78 out of 100, reflecting its potential danger before deactivation. The domain was also listed on two public blocklists, including PhishDestroy and OpenPhish, which further highlights its malicious intent. This case illustrates the ongoing challenges in identifying and mitigating phishing threats, especially when they exploit reputable platforms and services.