getting-started-sign-in-now-103316[.]weeblysite[.]com

This domain is assessed as high risk and identified as a fake login credential harvesting page designed to impersonate a generic sign-in portal. The page title "Home | getting-started-sign-in-now" suggests a fabricated onboarding or authentication flow intended to deceive users into submitting login credentials. The infrastructure is currently taken offline, indicating disruption of active phishing delivery, but prior exposure risk remains relevant.

Technical indicators show multiple independent confirmations of malicious behavior. VirusTotal reports 17/95 security vendors flagging the domain. The domain resolves to IP address 74.115.51.54 hosted in the United States under AS27647 (Weebly, Inc.). It was created on December 19, 2012 and registered through Safenames Ltd. The SSL certificate is issued by Google Trust Services under WE1. The domain appears on 1 security blocklist, has been blocked by PhishDestroy, and is also flagged by Google Safe Browsing for phishing activity.

Mitigation actions should assume any submitted credentials were compromised. Affected users should immediately reset passwords, invalidate active sessions, and enable multi-factor authentication where possible. Security teams should review authentication logs for anomalous sign-in attempts associated with IP 74.115.51.54 and correlate with any credential reuse patterns. Due to the established hosting infrastructure and long domain age, defenders should also monitor for cloned infrastructure using similar naming conventions to sustain phishing campaigns even after this domain’s takedown.