outlook4-de[.]weebly[.]com

This domain, outlook4-de.weebly.com, is identified as a brand impersonation threat targeting Microsoft. Analysis indicates it mimics Outlook login portals to deceive users into submitting account credentials, potentially leading to unauthorized access or data exfiltration. No drainer kit signatures were detected in initial scans, but the domain aligns with credential harvesting infrastructure. Infrastructure analysis reveals the domain resolves to IP address 74.115.51.9, hosted on AS27647 (Weebly, Inc.) in the United States. It holds a Let's Encrypt SSL certificate (serial E8), providing a false sense of security. VirusTotal detection shows 20 out of 95 security vendors flagging the domain as malicious. The domain is registered through Weebly’s platform and appears on one security blocklist. Creation date metadata is unavailable, but passive DNS records suggest recent deployment. As of the latest verification, outlook4-de.weebly.com has been taken offline, likely following abuse reports or automated takedown procedures. While the immediate threat is mitigated, residual risk remains if cached pages persist or if the infrastructure is reused for similar campaigns. Users who interacted with the domain should assume credential exposure and initiate password resets for associated accounts. Network defenders are advised to monitor for connections to 74.115.51.9 and related subdomains under weebly.com for potential follow-on activity.