centerupdatingadminnnnnnh[.]weebly[.]com

This domain, centerupdatingadminnnnnnh.weebly.com, was registered on February 21 2026 through Squarespace Domains II LLC and resolves to the IP address 74.115.51.8, which belongs to AS27647 Weebly, Inc. in the United States. The site presented an HTTPS certificate issued by Let’s Encrypt (certificate identifier E8) and returned an HTTP 404 status when accessed, indicating that the content was not publicly reachable at the time of analysis. The page title observed in the response header was “Nur einen Moment…”, a German phrase meaning “Just a moment…”, which is often used by automated redirection services. The domain has been flagged by PhishDestroy and listed on a single security blocklist, demonstrating that at least one anti‑phishing feed has identified it as malicious.

VirusTotal scans show that 17 of 93 security‑vendor engines classified the domain as malicious, reinforcing the suspicion of a phishing campaign. The current operational status is offline, suggesting that the threat actor has taken the site down or that the hosting provider has removed it after detection. Defenders should treat any traffic to this host as potentially malicious. Monitoring of DNS queries for the exact FQDN and of outbound connections to 74.115.51.8 is recommended.

Because the domain is hosted on a shared Weebly infrastructure, additional domains on the same IP may be leveraged for future phishing attempts; therefore, network‑level blocks for the entire IP range can be considered, balanced against legitimate Weebly usage. Correlation with email logs for links containing the “centerupdatingadminnnnnnh” pattern may uncover ongoing campaigns. Since the site is already offline, incident response actions should focus on containment of any compromised credentials that may have been harvested before takedown, and on updating URL filtering policies to include this indicator of compromise.