willowplanninggroup[.]com

Analysis indicates willowplanninggroup.com remains active with a high risk classification for generic phishing. The domain was registered on November 29 2014 through GoDaddy.com LLC and currently resolves to IP address 35.212.71.118 hosted under AS15169 Google LLC. Infrastructure analysis reveals nameservers ns1.siteground.net and ns2.siteground.net along with an MX record pointing back to the domain itself. Technologies detected include WordPress MySQL PHP ZURB Foundation Bootstrap Yoast SEO and Nginx. The site returns HTTP status 403 and uses an SSL certificate issued by Let's Encrypt R13. Gridinsoft assigns a trust score of 0 out of 100 while the domain appears on two security blocklists and is flagged by PhishDestroy and ScamSniffer. VirusTotal reports detections from 2 out of 95 vendors and AlienVault OTX lists the domain in one threat intelligence pulse.

The page title Home - Willow Planning Group matches the domain name directly. This alignment combined with the generic phishing label and multiple vendor blocks forms the primary indicators of malicious use. The long registration history since 2014 does not preclude abuse as older domains are frequently repurposed for campaigns. No additional brand targets or specific scam categories beyond the generic phishing designation are recorded in available data.

Uncertainties remain around the exact payload or targeting scope because direct content inspection was not performed. HTTP 403 status limits further passive reconnaissance and the precise role of the detected technologies in any campaign cannot be confirmed without additional samples. Defenders should treat inbound messages or links referencing this domain as high risk and apply blocking at email gateway and DNS levels based on the existing blocklist entries and vendor detections. Continued monitoring for changes in IP resolution or nameserver configuration is recommended given the active status observed as of the July 12 2026 report date.