susanprojectplan[.]weebly[.]com

Analysis of susanprojectplan.weebly.com, listed as offline on July 24, 2026, indicates that the domain was previously used for credential phishing aimed at Microsoft Office accounts, as inferred from the page title "OFFICE - Sign in to office." The site was hosted on Weebly infrastructure (IP 74.115.51.9, AS27647) and protected by Cloudflare services. A Let's Encrypt certificate (E8) was present, suggesting HTTPS was offered at the time of operation. The domain registration, dated March 29, 2006, was processed through Safenames Ltd and resolves to four Amazon Route 53 nameservers (ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, ns-646.awsdns).

Threat intelligence flags the domain on a single security blocklist and records a block by PhishDestroy. VirusTotal scans show 11 of 95 antivirus engines flagging the domain as malicious, providing additional confidence in its malicious intent. HTTP probing returns a 404 status, consistent with the offline state.

While the exact content of the landing page cannot be verified due to the domain’s current unavailability, the convergence of page‑title evidence, blocklist inclusion, and multi‑engine detections supports a classification of credential phishing. Defenders should add the domain to deny‑list controls, monitor its DNS records for re‑activation, and educate users to avoid entering Office credentials on any site presenting a similar title. Continued observation of related Weebly‑hosted assets is recommended to detect potential re‑use of the infrastructure.