899887v[.]weebly[.]com

Investigation into the domain 899887v.weebly.com reveals its involvement in generic phishing activities. The phishing operation appears to be targeting users of the Polish email service 'poczta onet,' as indicated by the page title 'poczta onet - Home.' While specific details of drainer kits are not disclosed, the domain's infrastructure suggests a high risk for credential theft or similar fraudulent activities.

Technical indicators show that this domain is detected by 17 out of 95 security vendors on VirusTotal, highlighting its association with malicious activities. Registered through Safenames Ltd., the domain was created on February 26, 2026, and is hosted in the United States under AS27647 by Weebly, Inc., resolving to IP address 74.115.51.8. It is currently listed on one security blocklist. Although the domain was online initially, it is now offline, reducing immediate threat levels.

The current status of 899887v.weebly.com is offline, being actively monitored and blocked by security tools such as PhishDestroy. Despite the domain being taken offline, historical detection and association with phishing underscore the need for continued vigilance. Users and organizations are advised to update their blocklists and remain cautious of similar domains that could pose ongoing risks. Further investigation into associated infrastructure is recommended to identify potentially linked malicious domains or IPs.