oauislks-pod[.]weebly[.]com

The domain oauislks-pod.weebly.com was created on 21 February 2026 and is hosted on the Weebly platform (AS27647, United States). The site was secured with a Let’s Encrypt E8 certificate and was observed to be served through Cloudflare, indicating the use of a CDN and potential obfuscation of the true origin. DNS resolution points to the single IPv4 address 74.115.51.9, which is owned by Weebly, Inc. The domain’s authoritative name servers are ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, and ns-646.awsdns, all typical of AWS Route 53 configurations. The page title returned by the web server is “Home”, while an HTTP request returned a 404 status, suggesting that the landing page was removed or never served content.

The site was flagged as a generic phishing infrastructure, assigned an elevated risk level, and has been taken offline as of the report date (25 July 2026). VirusTotal analysis shows that 16 of 93 scanning engines identified the domain as malicious, and the domain appears on one external security blocklist. Additionally, the phishing‑defense service PhishDestroy has listed the domain as blocked. Registration was performed through Squarespace Domains II LLC, a registrar commonly used for legitimate web‑hosting services, which does not by itself indicate malicious intent.

Current evidence does not reveal the specific phishing kit or targeted brand; the only observable artifact is the generic “Home” title. Uncertainty remains regarding the content that was previously hosted, the exact lure employed, and whether additional sub‑domains were used as part of a broader campaign. Defenders should continue to block the resolved IP address 74.115.51.9 and the domain name at network perimeter controls, monitor for any re‑registration or resurrection of the host, and consider adding the domain to threat‑intel feeds to reduce false‑negative exposure.