urlDNA flagged hxxps://haciehelp[.]weebly[.]com as possible phishing on Mastodon on 13 November 2026. Its screenshot shows a page branded with the logo of Mexico's Secretaría de Hacienda y Crédito Público (finance min…
Source: infosec.exchange · published
urlDNA flagged hxxps://haciehelp[.]weebly[.]com as possible phishing on Mastodon on 13 November 2026. Its screenshot shows a page branded with the logo of Mexico's Secretaría de Hacienda y Crédito Público (finance ministry) under the heading "HACIENDA HELP SERVICE", with a form asking for an email address and passcode, hosted on a free Weebly site. Mexico's finance ministry and tax administration are being impersonated and are not involved. Use only official government websites (gob.mx) for tax matters. The domain is also on the Phishing Army blocklist.
Messages that claim to come from the police or another government service, especially about a fine, a refund or an investigation, are a common way to steal card details, identity documents or a login. Real agencies do not demand immediate payment by a link in a text, or ask you to type a driving licence and a card number on a look-alike page. Go to the official website or app you already use, or call a number from a statement or a government directory, not from the message. If you entered card or document details, contact your bank and report the texts to your national CERT or police cyber unit.
If a message, a page or a caller creates urgency about money, a login or a legal threat, pause and check the claim through a contact method you already trust. Keep screenshots, reference numbers and the exact addresses or phone numbers you were given, and tell your bank early if money has already left the account. Official brands and authorised firms named in a lure are not involved unless a primary source says otherwise.
Source: https://infosec.exchange/@urldna/117607485446289604 (urlDNA (@urldna@infosec.exchange), Nov 13, 2026, 12:30 AM ET)
PhishDestroy posted on Mastodon on 12 November 2026 that xxvv435[.]weebly[.]com is a phishing page. Its record describes an Onet Poczta login page with email and password fields, flagged by 19 of 92 VirusTotal engines…
PhishDestroy posted on Mastodon on 12 November 2026 that xncok12[.]weebly[.]com is a phishing page. Its record describes a GMX.NET-branded email and password login form, flagged by 17 of 92 VirusTotal engines. GMX is…
urlDNA flagged hxxps://correo2026[.]weebly[.]com as possible phishing on Mastodon on 13 November 2026. Its screenshot shows a Spanish-language page headed "Inicia sesión para actualizar tu correo electrónico" (sign in…
The urlDNA scanning service posted on Mastodon on 13 November 2026 that hxxps://roundcube2026.weebly.com is possible phishing, linking its scan analysis. The domain also appears on the Phishing Army extended blocklist…
A phishing page imitating German bank DKB was found on a path of arrondhevie.bj, the official site of a Benin district, according to a researcher. The district is not the operator.
PhishDestroy posted on Mastodon on 12 November 2026 that yourdailydelvry[.]weebly[.]com is a phishing page. Its record describes a DPD-branded parcel redelivery form titled "DPD (UK) - Your delivery experts." asking f…