wiudyedydwsu[.]weebly[.]com

This domain, wiudyedydwsu.weebly.com, is identified as a credential harvesting phishing resource targeting users through deceptive login prompts. The page title 'Cierpliwości...' suggests a localized or social engineering approach, likely designed to mimic legitimate authentication portals. No explicit brand impersonation or known drainer kit signatures were observed in initial analysis, though the infrastructure aligns with opportunistic phishing campaigns leveraging free hosting services to evade detection. Infrastructure analysis reveals the domain was registered through Safenames Ltd and resolves to the IP address 74.115.51.9, associated with AS27647 (Weebly, Inc.) in the United States. The domain was originally created on March 29, 2006, though the subdomain appears to have been repurposed for malicious activity. Detection metrics indicate 17 out of 95 security vendors flagged the domain on VirusTotal, while two independent blocklists—PhishDestroy and PhishingDB—have explicitly listed it. The SSL certificate, issued by Let's Encrypt (serial number E8), provides minimal assurance, as automated certificate issuance is commonly exploited in phishing operations. As of the latest assessment, the domain has been taken offline, likely following abuse reports or hosting provider intervention. However, the elevated risk persists due to the domain's historical registration and potential for reactivation under a different subdomain or IP. Organizations are advised to monitor for related indicators, including the resolved IP and registrar details, and implement network-level blocking for the identified infrastructure. Users should verify authentication prompts independently and report suspicious activity to relevant security teams for further analysis.