manxtwentiiesbonnie1[.]weebly[.]com

This domain, manxtwentiiesbonnie1.weebly.com, was identified as a generic phishing threat on July 24, 2026. The domain was registered through Squarespace Domains II LLC on February 21, 2026, and has since been taken offline. Infrastructure analysis reveals that the domain resolved to the IP address 74.115.51.8, which is located in the United States and is associated with Weebly, Inc. (AS27647). The domain was detected by 16 out of 93 security vendors, indicating a significant level of concern among threat detection platforms.

It also appears on one security blocklist, further corroborating its malicious nature. The SSL certificate for the domain was issued by Let's Encrypt, a common provider for free certificates, which does not inherently indicate malice but is often used in phishing campaigns due to its ease of acquisition. The HTTP status of the domain is 404, suggesting that the page may have been intentionally taken down or deleted. The page title was found to be 'Home,' which provides minimal information about the content of the site.

Given the elevated risk level and the number of detections, network administrators and security professionals should remain vigilant and ensure that this domain is blocked in their environments to prevent potential phishing attacks. The nameservers associated with the domain include ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, and ns-646.awsdns-06.net, indicating use of Amazon Web Services for DNS management. Cloudflare was detected as part of the domain's technology stack, which might have been used to mask the true origin of the content. Despite the domain being offline, the infrastructure and detection history suggest that it was actively used in a phishing campaign prior to its takedown.