fgu6653olruy[.]weebly[.]com

On July 25, 2026, analysis of fgu6653olruy.weebly.com confirms that the site is offline but retains characteristics of a generic phishing infrastructure. The domain was created on March 29, 2006 and is hosted on Weebly's platform, as indicated by the IP address 74.115.51.8 which belongs to AS27647 Weebly, Inc. in the United States. DNS resolution uses four Amazon Route 53 nameservers (ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, ns-646.awsdns). The site employed Cloudflare as a front‑end technology and presented an HTTPS certificate issued by Let’s Encrypt (E8).

An HTTP request returned a 404 status code and the page title reported by the scanner is “Home”, suggesting that the landing page no longer serves content. Reputation signals are extremely poor: Scamadviser assigns a trust score of 1 / 100, and 14 of 95 VirusTotal scanners flagged the domain as malicious. The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service. Registration was handled through Safenames Ltd, a registrar often used for disposable or low‑reputation sites.

Evidence confirms that the domain has been used for phishing, but the current offline state prevents direct observation of the payload or credential‑stealing pages. Consequently, the exact phishing kit, targeted brand, or victim interaction flow remain unknown. Defensive operators should continue to block the domain at DNS and proxy layers, monitor the associated IP range for any re‑activation, and add the domain to internal threat‑intel feeds. Periodic re‑scans are recommended to detect any changes in hosting or content that could reactivate the phishing campaign.