microsoftspainoffice[.]weebly[.]com

PhishDestroy identifies an active Microsoft brand impersonation domain operating as microsoftspainoffice.weebly.com that is specifically weaponized to harvest credentials under the guise of Microsoft Office services. The domain mimics legitimate Microsoft branding to trick users into entering sensitive account details on a fraudulent portal, exposing victims to credential theft and potential account takeover. This deception leverages social engineering against Spanish-speaking users and masquerades as regional Office services.

This domain was flagged across 2 public blocklists and detected by 16 of 95 VirusTotal security vendors, confirming its malicious status. Registered on March 29, 2006 through MarkMonitor, Inc., it resolves to IP 74.115.51.8 and holds a Let's Encrypt SSL certificate—attributes commonly abused to lend false credibility to phishing sites. The combination of an aged domain registration and hosting on a reputable CDN platform increases the risk of successful deception, making detection and prevention more difficult for end users.

Users who have accessed microsoftspainoffice.weebly.com should immediately assess exposure by reviewing account activity, enabling multi-factor authentication on all Microsoft and email accounts, and scanning devices for malware using up-to-date antivirus tools. Do not enter any credentials on this domain. Report the site to your security team and consider password resets on linked accounts. Organizations are advised to block this domain at DNS and network levels and investigate potential lateral movement if any credentials were reused internally.