nrainternetmarketing[.]weebly[.]com

Analysis of nrainternetmarketing.weebly.com shows a newly registered site created on 22 February 2026. The domain resolves to 74.115.51.9, an address owned by AS27647 Weebly, Inc. in the United States. HTTP requests receive a 200 OK response and the site presents a valid Let’s Encrypt certificate (issuer E8), indicating active TLS. The page title returned by the server is “nrainternetmarketing - Blog”, and the stack advertises Weebly, MySQL, PHP, Amazon Web Services, Twitter widgets, jQuery, Google Analytics and Cloudflare, consistent with a typical hosted blog environment. Reputation data are uniformly negative.

The Gridinsoft trust score is 0 out of 100, and the domain appears on one security blocklist. VirusTotal records 11 of 95 scanners flagging the site, while Google Safe Browsing classifies it as social engineering. PhishDestroy has already listed the domain as blocked. The registrar listed is Squarespace Domains II LLC, and the authoritative name servers are ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk and ns-646.awsdns. The documented scam type is banking phishing.

Taken together, the infrastructure signals a high‑risk, active phishing operation that targets financial credentials. The lack of publicly available page content prevents confirmation of the exact lure used, but the combination of a fresh domain, low trust score, multiple vendor detections and blocklist presence justifies a high risk rating. Defenders should block the domain at the DNS and proxy layers, add the IP to network blocklists, and monitor outbound traffic for connections to the identified AWS name servers. Continuous re‑scanning is recommended to capture any changes in payload or hosting configuration.