annprojectplan[.]weebly[.]com

This domain, annprojectplan.weebly.com, has been classified as a credential‑phishing site targeting Microsoft OneDrive users. The live page returned an HTTP 404 status and the title observed was “ONEDRIVE – Sign in to office”, indicating an attempt to lure victims into entering Office credentials. The site is hosted on a Weebly infrastructure (AS27647, United States) and resolves to IP 74.115.51.9, which is associated with the Weebly hosting provider. SSL termination is supplied by a Let’s Encrypt certificate (issuer E8), confirming that HTTPS is available but does not mitigate the phishing risk.

Technical fingerprints show Cloudflare as a detected technology and the authoritative nameservers are ns‑123.awsdns‑15.com, ns‑1500.awsdns‑59.org, ns‑1797.awsdns‑32.co.uk, and ns‑646.awsdns, all belonging to Amazon Route 53. The registrar listed is Safenames Ltd and the domain creation date is 29 March 2006, suggesting long‑term ownership possibly repurposed for abuse. Reputation metrics are extremely low, with a ScamAdviser trust score of 1 / 100 and the domain appearing on one security blocklist. VirusTotal analysis recorded 12 detections out of 95 scanners, reinforcing the malicious classification.

The site has been taken offline, reflected by the 404 response and a current status of ‘offline’, and it is listed as blocked by PhishDestroy. At present, no additional payloads, redirects, or secondary infrastructure have been observed. Defenders should continue to block the domain at network perimeter and proxy layers, monitor DNS queries for the listed nameservers, and consider adding the IP address 74.115.51.9 to deny‑lists. Ongoing vigilance is advised in case the operator re‑hosts the phishing page on a different host or modifies the URL path.