72216[.]weebly[.]com

On July 23, 2026, the domain 72216.weebly.com was observed to host a site whose page title is "Home". The site resolves to the IP address 74.115.51.8, which belongs to the AS27647 network operated by Weebly, Inc. in the United States. DNS resolution is provided by four Amazon Route 53 name servers (ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, ns-646.awsdns). The web server presents a Cloudflare front‑end and serves a Let's Encrypt certificate (subject / CN=E8). An HTTP request returns a 404 status code, and the domain has been taken offline at the time of analysis.

The site is listed on a single security blocklist and is specifically flagged by PhishDestroy. VirusTotal reports that fifteen of ninety‑five scanning engines have classified the domain as malicious, indicating a moderate level of detection across the security community. The registrar listed is Safenames Ltd, and the domain was originally registered on 29 March 2006, suggesting long‑standing ownership. Scamadviser assigns a trust score of 1 out of 100, reflecting extreme distrust. The domain is explicitly marked as impersonating the AT&T brand, although no further content analysis is available to confirm the nature of the impersonation.

The available evidence therefore confirms that the infrastructure is associated with a known phishing‑related blocklist and that multiple security vendors have raised alerts, but the exact payload or credential‑collection mechanisms remain unknown because the site is offline and no page content was captured. Defenders should continue to block the IP address 74.115.51.8 and the domain 72216.weebly.com at perimeter and DNS layers, monitor for any resurgence of the host under new subdomains, and consider adding the domain to internal threat‑intel feeds. Ongoing observation of the registrar Safenames Ltd and the Amazon Route 53 name servers may reveal future re‑use of the same infrastructure.