mediprohealthcaregr0upchat[.]weebly[.]com

This domain was flagged as part of a phishing campaign and is currently offline. The fully qualified host name mediprohealthcaregr0upchat.weebly.com resolves to the IPv4 address 74.115.51.9, which belongs to AS27647 Weebly, Inc. in the United States. The site was provisioned on March 29 2006 and is registered through Safenames Ltd. DNS resolution uses four AWS Route 53 name servers (ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, ns-646.awsdns). The web server presents a TLS certificate issued by Let’s Encrypt (identifier E8) and is fronted by Cloudflare, indicating typical Weebly hosting.

An HTTP request returns a 404 Page Not Found status and the page title is literally “404 – Page Not Found”, confirming that the malicious content has been removed or disabled. The domain appears on a single public blocklist and is specifically listed by PhishDestroy. VirusTotal reported 11 detections out of 95 scanning engines, demonstrating moderate consensus among anti‑malware products that the host was involved in malicious activity. No additional public intelligence such as OTX tags or Safe Browsing entries is provided.

Because the site is offline, immediate infection risk is low, but the infrastructure—particularly the shared Weebly hosting and Cloudflare front‑end—could be reused for future phishing pages. Defenders should add mediprohealthcaregr0upchat.weebly.com to internal blocklists, monitor the IP 74.115.51.9 for any re‑appearance of malicious content, and watch for new sub‑domains under the same registrar or name server set. Continuous feed ingestion from PhishDestroy and periodic re‑scans on VirusTotal are recommended to catch any re‑activation. In environments where outbound traffic to Weebly‑hosted domains is permitted, consider applying URL filtering rules that flag any request to this exact host until the threat is fully retired.