dpgwgztcklrsgzxlwfl[.]weebly[.]com

This domain dpgwgztcklrsgzxlwfl.weebly.com is classified as a generic phishing infrastructure currently taken offline. The page presents a counterfeit “Correo - Portal de autoservicio” interface, indicating a likely credential-harvesting attempt targeting user email or self-service account login data. The infrastructure is consistent with phishing kits deployed on shared hosting platforms to collect authentication credentials.

Technical indicators confirm malicious behavior. VirusTotal reports 17/95 security vendors flagging the domain. The domain is registered through Safenames Ltd and resolves to IP 198.18.2.80 under AS27647 Weebly, Inc. It was created on March 29, 2006 and is associated with 2 security blocklists, including PhishDestroy and PhishingDB. The SSL certificate is issued via Let's Encrypt E8, which is commonly used in rapidly provisioned phishing deployments.

At present, the domain has been taken offline, reducing active exposure; however, historical interaction risk remains. Users who entered credentials should assume compromise and immediately reset affected passwords, especially for email accounts. Multi-factor authentication should be enabled where available, and session tokens should be revoked. Security teams should monitor logs for unauthorized access attempts and block residual DNS or IP resolution to 198.18.2.80 to prevent reactivation or replay attacks.