dropboxmailer4attsbcglobal[.]weebly[.]com

Analysis of dropboxmailer4attsbcglobal.weebly.com shows a domain that has been flagged as a generic phishing site and is currently offline. The domain was registered on March 29, 2006 through Safenames Ltd. and resolves to IP address 74.115.51.8, which is assigned to AS27647 Weebly, Inc. in the United States. The host is protected by a Cloudflare front‑end and presents a Let's Encrypt/E8 SSL certificate, indicating encrypted HTTPS support. HTTP probing returned a 404 status code and the page title reported by the scanner is "MY SITE - Home," which provides no indication of malicious content but confirms the site was reachable at the time of inspection.

VirusTotal scans recorded 15 detections out of 93 security vendors, suggesting a moderate level of consensus among threat‑intelligence sources. The domain appears on one security blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its classification as a phishing resource. Nameserver configuration lists four AWS‑managed name servers (ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, ns-646.awsdns).

No additional public intelligence such as OTX references or Safe Browsing alerts is available. Given the observed detections, blocklist presence, and the offline status, defenders should continue to enforce deny‑list rules for the domain and its associated IP address, monitor for any resurgence of the host, and consider extending protection to the full set of AWS name servers used. Further investigation of any residual traffic or DNS queries may reveal whether the infrastructure is being reused for other malicious campaigns.