hom5326[.]weebly[.]com

The domain hom5326.weebly.com is flagged as a generic phishing site and is currently taken offline. Technical profiling shows the hostname resolves to IP address 74.115.51.9, which belongs to the United States and is announced by AS27647 Weebly, Inc. The server presents a Let's Encrypt certificate (E8) and utilizes Cloudflare services, indicating a typical CDN‑protected web‑hosting setup. HTTP requests return a 404 status, and the only observable page element is the title "Nur einen Moment…"; no further page content has been captured. VirusTotal analysis reports that fifteen of ninety‑five scanning engines have flagged the domain, providing independent confirmation of malicious intent.

The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy feed. Registration data indicates the name was created on March 29, 2006 through Safenames Ltd, and the authoritative DNS records are served by four AWS name servers (ns‑123.awsdns-15.com, ns‑1500.awsdns-59.org, ns‑1797.awsdns-32.co.uk, ns‑646.awsdns). While the current offline status suggests the phishing campaign is not actively serving content, the infrastructure remains in place and could be reactivated.

Defenders should continue to deny DNS resolution for hom5326.weebly.com, enforce outbound filtering on the associated IP 74.115.51.9, and monitor the address for any resurgence of traffic. Updating internal threat‑intel repositories with the registrar, creation date, and observed security‑vendor detections will aid correlation with future incidents. Given the limited public evidence beyond the title and status codes, analysts should treat the domain as a dormant but potentially reusable phishing vector and maintain vigilance for re‑deployment.