officewebzx[.]weebly[.]com

This domain, officewebzx.weebly.com, is actively engaged in credential harvesting phishing operations targeting users through deceptive login interfaces. Analysis indicates the page presents a German-language loading prompt ('Nur einen Moment…'), a common tactic to simulate legitimate authentication portals while capturing entered credentials. The infrastructure leverages social engineering techniques to mimic enterprise or productivity platforms, increasing the likelihood of successful compromise for corporate or personal accounts. Infrastructure analysis reveals the domain was registered through Squarespace Domains II LLC on February 21, 2026, an unusually future-dated creation that may indicate domain spoofing or registry manipulation. The host resolves to IP address 74.115.51.8, associated with AS27647 (Weebly, Inc.) in the United States. Detection metrics show 17 out of 95 security engines on VirusTotal flag the domain as malicious, while it appears on one additional security blocklist. The SSL certificate, issued by Let's Encrypt (serial number E8), provides transport layer encryption but does not mitigate the underlying phishing threat. Users who have interacted with this domain should immediately cease all activity and assume credential compromise. Affected individuals must change passwords for any accounts entered on the site, prioritizing accounts with administrative or financial access. Multi-factor authentication should be enabled where available to prevent unauthorized access. System administrators are advised to block the domain and associated IP (74.115.51.8) at the network perimeter. Monitoring for unusual login attempts or account activity is recommended for at least 30 days post-exposure.