gfjhfyjfgg[.]weebly[.]com

Analysis of gfjhfyjfgg.weebly.com indicates this domain was actively flagged as a phishing site before being taken offline. The domain, hosted on Weebly's infrastructure (AS27647, Weebly, Inc.), resolved to the IP address 74.115.51.8, located in the United States. As of July 24, 2026, the site returns an HTTP 404 status, confirming its current offline state. The page title was identified as 'Home,' though no specific brand or service imitation was confirmed from available data.

Infrastructure analysis reveals the domain was registered through MarkMonitor, Inc. on March 29, 2006, and utilized Cloudflare for traffic routing. Nameservers point to AWS DNS services (ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, and ns-646.awsdns), a common configuration for legitimate and malicious sites alike. The SSL certificate was issued by Let's Encrypt (YE1), which does not inherently indicate malicious intent but is frequently used in phishing campaigns due to its accessibility. Detection data shows the domain appeared on at least one security blocklist (PhishDestroy) and was flagged by 18 of 91 security vendors on VirusTotal, a clear indicator of malicious classification.

No additional context about the phishing kit, targeted brand, or specific lure type is available from the provided evidence. Defenders should treat this domain as a confirmed phishing threat, particularly for historical logs or retrospective analysis. Given its Weebly hosting and offline status, further investigation may require cooperation with Weebly's abuse team or analysis of cached content from security vendors. The domain's long registration period (over 20 years) does not mitigate its recent malicious use, as phishing actors often exploit older domains to evade detection.