weekne[.]com

PhishDestroy identifies weekne.com as a live phishing domain hosting a counterfeit login page designed to harvest user credentials. This site mimics a legitimate authentication flow, tricking visitors into entering usernames, passwords, or other sensitive data under false pretenses. Once credentials are submitted, they are likely harvested for credential-stuffing attacks or sold on underground markets, putting victims at immediate risk of account takeovers and financial fraud.

This domain was flagged by 1 out of 95 security vendors on VirusTotal, indicating limited but concrete detection. It was registered through Gname.com Pte. Ltd., created on November 28, 2025, and resolves to IP address 195.130.202.164. The use of a Let's Encrypt SSL certificate adds a veneer of legitimacy, further deceiving users who rely on HTTPS indicators. These factors combined suggest an active and evolving phishing campaign with low visibility on blocklists, increasing the risk of exposure to unwary visitors.

If you visited weekne.com or entered any personal information, immediately change the passwords for any accounts you may have shared on the site. Use a password manager to generate and store strong, unique passwords. Enable multi-factor authentication wherever possible. Scan your device for malware using reputable antivirus software and monitor your financial accounts for suspicious activity. Report the domain to your IT team or security provider if this was accessed from a work device. Avoid interacting with the site further and consider using a browser-based blocklist tool to prevent future exposure.