yth-108845[.]weeblysite[.]com

yth-108845.weeblysite.com was registered on February 21, 2026 through Safenames Ltd. The domain resolves to IP 74.115.51.54, which is announced as part of AS27647 owned by Weebly, Inc. Hosting infrastructure is identified as Amazon Web Services with DNS services provided by Cloudflare; the four authoritative nameservers are ns-1375.awsdns-43.org, ns-1854.awsdns-39.co.uk, ns-510.awsdns-63.com, and an incomplete entry truncated in the source data. The site presented the HTML title “Home | yth” and returned an HTTP 404 response when accessed, indicating that the landing page is missing or deliberately removed. TLS termination is performed by a Google Trust Services certificate issued to “WE1”, confirming that the connection was secured by a Google‑issued wildcard.

VirusTotal analysis shows that 21 of 93 scanning engines flagged the domain as malicious, reinforcing the suspicion of phishing use. The domain has been added to at least one public blocklist and was actively blocked by the PhishDestroy sinkhole service before being taken offline. The current status is offline, and no further content is reachable for analysis.

Defenders should continue to monitor the associated IP address and the AWS DNS zones for any re‑activation, add the domain and its IP to local deny lists, and enforce URL filtering for any traffic that matches the observed page title. Because the underlying site content is not available, attribution of the specific phishing campaign or target brand remains uncertain, and any future re‑hosting should be treated as high‑risk until verified.