99088[.]weebly[.]com

Analysis as of July 23, 2026 indicates that 99088.weebly.com is actively hosting a generic phishing campaign. The site resolves to IP 74.115.51.8, which belongs to AS27647 Weebly, Inc., located in the United States. The domain was registered on February 21, 2026 through Squarespace Domains II LLC, and the TLS certificate is issued by Let’s Encrypt (certificate identifier E8), confirming that HTTPS is correctly configured. An HTTP GET returns a 200 status code, and the page title returned by the server is “poczta onet”, suggesting an attempt to reference the Polish mail service Onet. The underlying stack includes Weebly, MySQL, PHP, Amazon Web Services, reCAPTCHA, jQuery, Google Analytics, and Cloudflare, all typical of a hosted website but also consistent with infrastructure used by many phishing operators.

Reputation services flag the domain heavily. Google Safe Browsing classifies the URL as a social engineering threat, and 18 of 93 VirusTotal scanners have reported malicious behavior. The domain appears on at least one public blocklist and is listed as blocked by PhishDestroy. Gridinsoft assigns a trust score of 0 out of 100, indicating no confidence in the site's legitimacy. The combination of a recent creation date, a reputable hosting provider, a valid TLS certificate, and strong detection signals points to a deliberately crafted malicious site rather than an abandoned or compromised legitimate site.

Uncertainty remains regarding the specific payload delivered to victims, as the page content has not been captured in the available intelligence. Defenders should therefore treat any traffic to 99088.weebly.com as hostile. Recommended actions include adding the domain to outbound web filtering rules, updating intrusion detection signatures to block the IP 74.115.51.8, and monitoring for any related command‑and‑control traffic that may leverage the same hosting environment.