confirmar-live-ou1look01[.]weebly[.]com

Analysis of confirmar-live-ou1look01.weebly.com shows a credential‑phishing infrastructure that was taken offline prior to the assessment on July 24, 2026. The site returned an HTTP 404 status with the page title "Just a moment..." and was served over a valid Let’s Encrypt certificate (type E8). The domain is hosted on Weebly’s infrastructure (AS27647) in the United States and resolves to IP 74.115.51.8. Cloudflare was detected as a front‑end technology, and the authoritative nameservers are ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, and ns-646.awsdns.

Registration was performed through Safenames Ltd, and the domain creation date is recorded as March 29, 2006. Reputation signals are extremely poor: the Scamadviser trust score is 1 / 100, and the domain appears on one security blocklist. PhishDestroy has explicitly blocked the site, and VirusTotal reports 15 detections out of 95 scanned vendors, confirming malicious classification.

The observable data points to a classic credential‑phishing campaign that likely leveraged the Weebly platform to host malicious content, although the exact payload or target brand cannot be confirmed because the site is offline. Defenders should immediately add the domain and its resolved IP address to outbound and inbound block lists, monitor for any sub‑domain or sibling activity under the same nameserver set, and treat any traffic to the associated Cloudflare edge as suspicious. Continuous re‑evaluation is advised in case the infrastructure resurfaces under a new domain or IP range.