Automated URL scanner urlDNA posted on Mastodon (infosec.exchange) on 10 November 2026 that customer-mail-com[.]weebly[.]com is a possible phishing page. The address uses mail.com's name on the Weebly site builder and…
Source: infosec.exchange · published
Automated URL scanner urlDNA posted on Mastodon (infosec.exchange) on 10 November 2026 that customer-mail-com[.]weebly[.]com is a possible phishing page. The address uses mail.com's name on the Weebly site builder and is on the Phishing Army blocklist. mail.com and Weebly are not the scammers. Sign in to webmail only at the provider's own address.
The address customer-mail-com.weebly.com uses mail.com's name on the Weebly site builder and is on the Phishing Army blocklist. Look-alike webmail "customer" or "support" pages usually claim the inbox is locked or that a message could not be delivered, then ask for the mailbox password. That password can be used to reset other accounts that share the same address.
mail.com and Weebly are not the operators. Sign in to webmail only at the provider's own address, typed by you. The flag comes from an automated scanner and has not been independently checked by scammers.com.
Webmail look-alike pages often quote a message you were not expecting, such as a failed delivery or a storage warning, to make a password request feel routine. If you typed a mail.com password on the Weebly page, change it at mail.com and change any other accounts that use the same password or that rely on that mailbox for resets. Then review recent sign-ins and forwarding rules. Tell contacts to ignore any mail sent from your address while it was exposed.
Public post on Mastodon, 10 November 2026: https://infosec.exchange/@urldna/117592622169655222
The indicators come from this source and have not been independently checked by scammers.com.
PhishDestroy posted on Mastodon on 12 November 2026 that xncok12[.]weebly[.]com is a phishing page. Its record describes a GMX.NET-branded email and password login form, flagged by 17 of 92 VirusTotal engines. GMX is…
PhishDestroy posted on Mastodon on 12 November 2026 that xfinitywebmailw3r[.]weebly[.]com is a phishing page. Despite the Xfinity name in the address, its record describes a Network Solutions-branded webmail login for…
URL-analysis service urlDNA (@urldna@infosec.exchange) posted on Mastodon on 12 November 2026 that hxxps://rdkyle[.]wixsite[.]com/my-site is possible phishing. The screenshot it captured shows a Wix-built page reading…
ScanMalware posted on X on 12 November 2026 that payee-security-online[.]web[.]app is a confirmed scam. Its scan report says the host matches an analyst-vetted UK bank account-recovery phishing kit impersonating Santa…
Anti-phishing project PhishDestroy posted on Mastodon on 12 November 2026 that zerion-inc[.]webflow[.]io is a suspected phishing site. Its domain record shows a page copying Zerion's wallet homepage ("Crypto Wallet fo…
PhishDestroy posted on Mastodon on 12 November 2026 that xxvv435[.]weebly[.]com is a phishing page. Its record describes an Onet Poczta login page with email and password fields, flagged by 19 of 92 VirusTotal engines…