willowplanninggroup[.]com

willowplanninggroup.com entered the PhishDestroy evidence set on Dec 7, 2025. The assembled evidence scores 76/100 (high).

Two independent sources are positive: VirusTotal and ScamSniffer. VirusTotal recorded 2 detections among 91 engines: CRDF, Gridinsoft on Jul 26, 2026 at 03:06 UTC. ScamSniffer listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 18:20 UTC. The evidence is not unanimous. AlienVault OTX listed 1 community pulse reference (not vendor detections) on Mar 1, 2026 at 15:30 UTC. Google Safe Browsing returned no flag on Mar 2, 2026 at 20:36 UTC. URLScan completed without a malicious verdict (score 0) on Feb 26, 2026 at 01:46 UTC.

An access-restricted HTTP 403 response was recorded on Aug 7, 2026 at 10:31 UTC. Registration records for the domain list GoDaddy.com, LLC as the registrar and Nov 29, 2014 as the creation date. At collection time, the hostname resolved to 35.212.71.118 on AS15169 (GOOGLE, US). The associated network metadata labels the endpoint as AS15169 Google LLC in Washington, US. The stored server header is nginx. Captured page title: “Home - Willow Planning Group”. DOM analysis completed on Mar 11, 2026 at 09:22 UTC; stored DOM score 76/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Jul 29, 2026 at 02:41 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Let's Encrypt / R13 as the certificate issuer with validity through Apr 28, 2026; checked Mar 11, 2026 at 19:32 UTC.

No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. Taken together, the page content and independent findings support classifying this hostname as phishing. The stored record does not establish the post-click interaction, and it does not claim a confirmed wallet-draining transaction or credential submission.