att-101196[.]weeblysite[.]com

This domain, att-101196.weeblysite.com, is identified as a fake login phishing site targeting users through credential harvesting techniques. The domain is currently offline, but prior activity indicates it was operational for malicious purposes. No specific brand impersonation was confirmed, though the generic phishing infrastructure suggests broad targeting of login credentials across multiple platforms. Analysis indicates the domain was flagged by 19 of 95 security vendors on VirusTotal, reflecting a high confidence level in its malicious nature. It was registered through SafeNames Ltd and resolved to the IP address 74.115.51.54, hosted on AS27647 (Weebly, Inc.). The domain was created on February 21, 2026, an anomalous future date likely indicative of fraudulent registration practices. It appeared on one security blocklist and was explicitly flagged as phishing by Google Safe Browsing. The SSL certificate was issued by Google Trust Services (WE1), a common tactic to lend false legitimacy to phishing pages. The page title, '404 - Page Not Found,' suggests either a placeholder or an attempt to evade detection by security crawlers. The domain is currently offline, but its prior infrastructure and detection metrics warrant caution. Organizations and users are advised to block the domain and its associated IP (74.115.51.54) at the network level. Security teams should monitor for related indicators, including the registrar (SafeNames Ltd) and hosting provider (Weebly, Inc.), as these may be reused for future phishing campaigns. End-users should be educated on recognizing fake login pages, particularly those hosted on subdomains of legitimate platforms. If credentials were entered on this domain, immediate password resets and multi-factor authentication enforcement are recommended.