mymtsgcxcvbvc-107128[.]weeblysite[.]com

Analysis of the domain mymtsgcxcvbvc-107128.weeblysite.com shows that the site is presently taken offline, returning an HTTP 404 status code. The domain resolves to the IP address 74.115.51.55, which is assigned to AS27647 (Weebly, Inc.) and is geographically located in the United States. DNS resolution is served by four Amazon Route 53 nameservers (ns-1375.awsdns-43.org, ns-1854.awsdns-39.co.uk, ns-510.awsdns-63.com, ns-522.awsdns), indicating reliance on Amazon Web Services infrastructure. A TLS certificate issued by Google Trust Services under the label “WE1” was observed, confirming the use of a valid SSL certificate.

The page title returned by the server is “Just a moment…”, a generic phrase often associated with Cloudflare’s challenge page, and the site is also reported as employing Cloudflare services. VirusTotal scans have recorded 14 positive detections out of 95 security vendors, and the domain appears on a single external security blocklist. Registration was performed through Safenames Ltd on December 19 2012. The domain has been flagged by PhishDestroy as a phishing source.

While the current offline state limits direct observation of malicious content, the combination of a phishing classification, multiple vendor detections, and active blocklisting suggests a credible threat. Defenders should proactively block the domain and its associated IP, monitor for any re‑appearance in DNS queries, and incorporate the indicator set into intrusion‑detection rules. Ongoing surveillance of related AWS and Cloudflare assets is advised to detect potential migration of the phishing infrastructure to alternative hostnames.