bt-internet-108543-107360[.]weeblysite[.]com

The domain bt-internet-108543-107360.weeblysite.com was observed resolving to the IPv4 address 74.115.51.54, an address owned by AS27647 (Weebly, Inc.) and geolocated to the United States. Hosting analysis shows the site was built on a Weebly platform and leverages MySQL, PHP, Vue.js, and Cloudflare services, indicating a typical low‑cost web‑hosting stack. The SSL certificate presented by the site is issued by Google Trust Services under the WE1 label, a certificate authority often used by legitimate Google services, which may be intended to increase perceived legitimacy. The page title returned by HTTP requests is "Home | BT INTERNET," and the HTTP response code is 404, suggesting the primary page is not currently serving content.

The domain was created on 19 December 2012 and registered through Safenames Ltd.; its authoritative name servers are ns-1375.awsdns-43.org, ns-1854.awsdns-39.co.uk, ns-510.awsdns-63.com, and ns-522.awsdns. VirusTotal analysis recorded 19 detections out of 94 scanning engines, and the domain appears on a single security blocklist, specifically PhishDestroy, which has already taken the site offline. Intelligence categorizes the activity as a tech‑support scam that impersonates Google, aligning with the brand target information.

While the exact landing page content has not been captured, the combination of a Google‑issued certificate, a generic “Home” title, and the presence on a phishing blocklist strongly indicates malicious intent. Defenders should add the domain to DNS and URL filtering policies, monitor other Weebly‑hosted domains for similar certificate use, and consider broader heuristic rules that flag tech‑support scam patterns. Continuous re‑evaluation is advised in case the infrastructure is re‑activated or repurposed for further brand‑impersonation campaigns.