att-engkr[.]weeblysite[.]com

This domain, att-engkr.weeblysite.com, is flagged as a generic phishing site designed to mimic a legitimate login portal. Analysis indicates no explicit brand impersonation or crypto drainer kit association, though the infrastructure aligns with credential harvesting campaigns. The page title, '404 - Page Not Found,' suggests the phishing content was either removed or concealed, a common tactic to evade detection while preserving domain reputation for future use.

Technical indicators confirm elevated risk: VirusTotal reports 20/95 security vendors flagging the domain as malicious. The domain was registered on February 21, 2026, through SafeNames Ltd., resolving to IP 74.115.51.54 (AS27647, Weebly, Inc.). It appears on one security blocklist and is blocked by at least one threat intelligence feed. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the risk, as phishing domains frequently leverage valid certificates to appear legitimate.

The domain is currently offline, likely due to takedown actions or temporary suspension by the hosting provider. While the immediate threat is mitigated, residual risk remains due to the domain's registration persistence and potential for reactivation. Organizations should monitor for DNS reactivation, SSL certificate reissuance, or subdomain variations. Network defenders are advised to block the domain, IP, and associated SSL certificate thumbprint at perimeter controls. End-users should verify login portals via official channels and report suspicious URLs to their security teams for further analysis.