io-uphold-cdn[.]weebly[.]com

Analysis of io-uphold-cdn.weebly.com as of July 24 2026 indicates the domain is currently offline but retains multiple indicators of malicious use. Google Safe Browsing classifies the site under social engineering, and PhishDestroy has added it to its blocklist. The domain appears on one additional security blocklist, and nine of ninety‑five VirusTotal scanners have reported it as malicious, reinforcing the suspicion of phishing activity. Registration data shows the domain was created on 29 March 2006 through Safenames Ltd., a registrar commonly used for legitimate sites, which does not mitigate the observed risk.

DNS resolution points to IP address 74.115.51.9, which belongs to AS27647 owned by Weebly, Inc., located in the United States. The hosting environment is fronted by Cloudflare and the domain uses a Let’s Encrypt certificate (E8), suggesting the presence of HTTPS despite the underlying content being unavailable. The HTTP response is a 404 – Page Not Found, and the page title returned is “404 - Page Not Found”, providing no functional content for further analysis. Nameserver records include ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, and ns-646.awsdns, indicating reliance on Amazon Route 53 DNS services.

While the site is offline, the combination of Safe Browsing flag, blocklist inclusion, multiple vendor detections, and the historical use of the domain for phishing suggests a continued threat if the domain is re‑activated. Defenders should maintain the domain on blocklists, monitor DNS changes for any re‑hosting, and enforce outbound filtering for URLs matching the domain. Existing security products that reference Google Safe Browsing, VirusTotal, or PhishDestroy should be updated to reflect the elevated risk status. Until the domain is confirmed clean, it should be treated as a high‑confidence phishing indicator.