muhmcas[.]weebly[.]com

This domain, muhmcas.weebly.com, is identified as a credential harvesting phishing site designed to mimic legitimate login portals. The infrastructure is engineered to deceive users into submitting usernames, passwords, and other sensitive authentication details, which are then exfiltrated to unauthorized third parties. Analysis of the domain reveals it employs social engineering tactics, such as replicating corporate or institutional login interfaces, to exploit trust and urgency. Infrastructure analysis indicates the domain was registered on April 07, 2026, through MarkMonitor, Inc., and currently resolves to the IP address 74.115.51.8, hosted by Weebly, Inc. in the United States. The domain appears on one security blocklist and is flagged by 21 out of 95 security vendors on VirusTotal, indicating a consensus on its malicious nature. The SSL certificate is issued by Let's Encrypt (serial number E8), which, while providing encryption, does not validate the legitimacy of the site's content or intent. Users who have visited muhmcas.weebly.com or entered credentials on this domain should immediately revoke and reset any exposed passwords, particularly for accounts associated with the impersonated entity. Enable multi-factor authentication (MFA) on all critical accounts to mitigate unauthorized access. Monitor financial and communication platforms for signs of compromise, such as unauthorized transactions or messages. If credentials were reused across multiple services, reset passwords for all affected accounts. Report the incident to relevant security teams or incident response platforms for further investigation.