admin-027-com[.]weebly[.]com

This domain, admin-027-com.weebly.com, poses a targeted brand impersonation threat designed to mimic the Microsoft Outlook Web App login interface. Analysis indicates the domain was crafted to harvest user credentials by presenting a fraudulent authentication portal under the page title 'Outlook Web App.' The threat specifically exploits trust in Microsoft's branding to deceive users into entering sensitive login details, which are then captured by the attackers for unauthorized access or further malicious activities such as account takeover or lateral movement within corporate networks. Infrastructure analysis reveals the domain was registered through Safenames Ltd on March 29, 2006, though the phishing content appears to have been hosted more recently on Weebly's platform. The domain resolves to IP address 74.115.51.9, associated with AS27647 (Weebly, Inc.) in the United States. Technical indicators include a Let's Encrypt SSL certificate (serial number E8), which may lend a false sense of legitimacy to the site. The domain is currently flagged by 14 out of 95 security vendors on VirusTotal and appears on two independent security blocklists. Despite its current offline status, historical activity and detection metrics classify this as an elevated-risk threat. Users who visited admin-027-com.weebly.com or entered credentials on the site should assume their login details have been compromised. Immediate actions include resetting passwords for any accounts accessed via the fraudulent portal, particularly Microsoft-related services. Multi-factor authentication should be enabled where available to mitigate unauthorized access. System scans for malware are recommended, as phishing sites may redirect to or host additional malicious payloads. Organizations should review logs for connections to 74.115.51.9 or the domain itself and monitor for suspicious activity linked to compromised credentials. If financial or sensitive data was entered, affected parties should report the incident to relevant authorities and consider credit monitoring services to detect potential fraud.