dwsfxjkbhds[.]weebly[.]com

Analysis indicates that the subdomain dwsfxjkbhds.weebly.com is currently active and associated with a generic phishing campaign. The domain is registered through Square, Inc., and its authoritative nameserver information could not be retrieved (NS_NOT_FOUND). DNS resolution points to the IPv4 address 74.115.51.8, which is hosted on infrastructure that includes Amazon Web Services and is fronted by Cloudflare. The site leverages a typical Weebly content‑management stack, as evidenced by detection of Weebly, MySQL, PHP, reCAPTCHA, jQuery, and Google Analytics scripts.

Reputation services have flagged the domain on two public phishing blocklists, specifically PhishDestroy and OpenPhish, confirming its presence on active threat feeds. VirusTotal analysis shows that 18 of 91 scanning engines have reported malicious behavior, reinforcing the suspicion of phishing activity. The high risk rating reflects the combination of blocklist inclusion, multiple vendor detections, and the use of a reputable hosting platform to obscure the malicious origin. Uncertainty remains regarding the exact page content, SSL certificate details, and HTTP response codes because these attributes were not captured in the available intelligence.

Consequently, defenders cannot assess whether transport‑layer encryption is correctly implemented or whether the site returns standard error codes that might aid detection. Mitigation recommendations include adding the domain and its resolving IP address to local deny lists, enforcing outbound DNS filtering for the domain, and ensuring that security products ingest the PhishDestroy and OpenPhish feeds. Continuous monitoring of the IP address for changes in hosting or additional malicious indicators is advised. Organizations should also consider broader heuristic rules that flag Weebly‑hosted sites presenting unexpected reCAPTCHA challenges, as this combination has appeared in prior phishing deployments.