weght[.]weebly[.]com

The domain weght.weebly.com was detected as a generic phishing site and taken offline prior to the July 23, 2026 reporting date. Infrastructure analysis shows the domain resolves to IP address 74.115.51.8, which is registered to AS27647 (Weebly, Inc.) and geolocated to the United States. The authoritative name servers are ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, and ns-646.awsdns, indicating reliance on Amazon Route 53 DNS services. A Let’s Encrypt certificate (issuer “Let’s Encrypt / E8”) is present, confirming the use of TLS, although the site returns an HTTP 404 status code, suggesting the malicious payload is no longer reachable.

VirusTotal records show that 15 of 95 scanning engines flagged the domain, evidencing moderate detection across security vendors. The domain appears on a single public security blocklist and is explicitly blocked by the PhishDestroy service. Registration information lists Safenames Ltd as the registrar, and the domain creation date is recorded as March 29, 2006. Technology fingerprints identify Cloudflare services, which may have been used for CDN or obfuscation.

The page title returned by the server is “Just a moment…”, but no additional content analysis is available. While the offline status limits immediate threat exposure, the combination of vendor detections, blocklist inclusion, and prior phishing classification warrants continued monitoring. Defenders should ensure the domain is added to network deny lists, enforce URL filtering to block any future resolution, and verify that endpoint protection solutions incorporate the latest threat intelligence for this indicator. Ongoing watch‑listing of the associated IP address and name‑server infrastructure is recommended to detect potential re‑use of the same hosting resources for other malicious campaigns.