gofreshnessa[.]weebly[.]com

This domain, gofreshnessa.weebly.com, is identified as a credential theft operation impersonating the Freshness brand. Analysis indicates the site was designed to harvest user login credentials through fraudulent login portals. The domain is currently offline, though historical activity remains a concern for security teams. Infrastructure analysis reveals the domain was registered on June 15, 2026, through MarkMonitor, Inc., and resolved to IP address 74.115.51.9. Security vendors flagged the domain as malicious, with 18 of 95 VirusTotal engines detecting it. The site appears on two security blocklists, and Google Safe Browsing classified it under SOCIAL_ENGINEERING. Additional indicators include a Let's Encrypt SSL certificate and backend technologies such as Weebly, MySQL, PHP, Amazon Web Services, and Cloudflare. The Gridinsoft trust score for this domain is 0/100, further confirming its malicious nature. The domain has been taken offline, but organizations should remain vigilant. Security teams are advised to block the domain and associated IP at the perimeter, update endpoint protection rules, and monitor for residual credential theft attempts. Users who may have interacted with the site should reset passwords immediately and enable multi-factor authentication on all accounts. Historical logs should be reviewed for connections to 74.115.51.9 or related infrastructure.