webde-101404[.]weeblysite[.]com

The domain webde-101404.weeblysite.com was registered on December 19, 2012 through Safenames Ltd and is hosted on Amazon Web Services infrastructure that is front‑ended by Cloudflare. DNS resolution points to the IP address 74.115.51.54, which belongs to AS27647 (Weebly, Inc.) and is geolocated in the United States. The site presents a TLS certificate issued by Google Trust Services under the WE1 label, indicating a legitimate certificate chain, but the certificate alone does not guarantee authenticity of the content. HTTP requests return a 404 status, and the page title reported by crawlers reads "Home | WEB.DE", matching the target brand Web.de.

The domain is classified as a brand‑impersonation scam, and it has been taken offline as of the report date. Security telemetry shows that 14 of 95 VirusTotal scanners flagged the domain as malicious, and it appears on a single external blocklist. PhishDestroy has also blocked the domain. The presence of both AWS and Cloudflare suggests the operators leveraged widely available cloud services to obscure infrastructure, a pattern common among low‑cost phishing kits.

While the certificate and hosting providers are reputable, the combination of a brand‑matching title, flagged detections, and blocklist inclusion indicates a high likelihood of credential‑harvesting intent aimed at Web.de users. Defenders should continue to block the domain at perimeter filters, monitor DNS queries for the host name, and ensure that any Web.de login portals are protected by multi‑factor authentication. Incident response teams should also correlate any recent authentication failures or suspicious activity on Web.de accounts with this domain, and consider adding the IP address 74.115.51.54 to reputation‑based deny lists while the site remains offline.