Skip to content
Scammers.com

Search results

8 reports for “Webmail or email-account credential phishing (13 Nov 2026)”

Searched by keyword.

PhishingReviewed

Fake Zimbra webmail sign-in at peee-dash-zim-six.vercel.app sends passwords to a form service

A post on X on 13 November 2026 shared a ScanMalware result rating peee-dash-zim-six[.]vercel[.]app/zimba.html a "CONFIRMED SCAM". ScanMalware's analysis describes a clone of the Zimbra Web Client sign-in page on a Ve…

  • peee-dash-zim-six.vercel.app
  • Path /zimba.html; credentials posted to formsubmit.co
  • Webmail or email-account credential phishing (13 Nov 2026)
Reported Nov 13, 20261 report
Screenshot of a Spanish-language fake 'sign in to update your email' page with empty email and password fields
PhishingReviewed

Spanish 'sign in to update your email' credential page at correo2026.weebly.com

urlDNA flagged hxxps://correo2026[.]weebly[.]com as possible phishing on Mastodon on 13 November 2026. Its screenshot shows a Spanish-language page headed "Inicia sesión para actualizar tu correo electrónico" (sign in…

  • correo2026.weebly.com
  • Weebly subdomain; form 'Inicia sesión para actualizar tu correo electrónico'
  • Weebly-hosted phishing pages (13 Nov 2026 cluster)
Reported Nov 13, 20261 report
Screenshot of a French-language fake 'you have received a PDF document' page asking for an email address and password
PhishingReviewed

French 'you have received a PDF document' credential-harvesting page at file-greview.web.app

urlDNA flagged hxxps://file-greview[.]web[.]app as possible phishing on Mastodon on 13 November 2026. Its screenshot shows a French-language page saying "Vous avez reçu un document" (you have received a document) with…

  • file-greview.web.app
  • Firebase (web.app) subdomain; French-language fake document-share login
  • Webmail or email-account credential phishing (13 Nov 2026)
Reported Nov 13, 20261 report
PhishingReviewed

urlDNA flags roundcube2026.weebly.com fake Roundcube webmail page

The urlDNA scanning service posted on Mastodon on 13 November 2026 that hxxps://roundcube2026.weebly.com is possible phishing, linking its scan analysis. The domain also appears on the Phishing Army extended blocklist…

  • roundcube2026.weebly.com
  • Hosted on shared weebly.com domain
  • Weebly-hosted phishing pages (13 Nov 2026 cluster)
Reported Nov 13, 20261 report
PhishingReviewed

Fake Onet Poczta (Polish webmail) login page at xxvv435.weebly.com

PhishDestroy posted on Mastodon on 12 November 2026 that xxvv435[.]weebly[.]com is a phishing page. Its record describes an Onet Poczta login page with email and password fields, flagged by 19 of 92 VirusTotal engines…

  • xxvv435.weebly.com
  • Weebly subdomain; URLScan brand: onetpl; VirusTotal 19/92
  • Weebly-hosted phishing pages (13 Nov 2026 cluster)
Reported Nov 12, 20261 report
PhishingReviewed

GMX.net email login phishing page at xncok12.weebly.com

PhishDestroy posted on Mastodon on 12 November 2026 that xncok12[.]weebly[.]com is a phishing page. Its record describes a GMX.NET-branded email and password login form, flagged by 17 of 92 VirusTotal engines. GMX is…

  • xncok12.weebly.com
  • Weebly subdomain; VirusTotal 17/92
  • Weebly-hosted phishing pages (13 Nov 2026 cluster)
Reported Nov 12, 20261 report
PhishingReviewed

Zimbra webmail phishing pages on Weebly: zimbfree, zimbrafree9 and zim-update2025

PhishDestroy posted on Mastodon on 12 November 2026 three Weebly-hosted pages it flagged as phishing: zimbfree[.]weebly[.]com, zimbrafree9[.]weebly[.]com and zim-update2025[.]weebly[.]com. Its records describe Zimbra-…

  • zimbfree.weebly.com
  • Also zimbrafree9.weebly.com, zim-update2025.weebly.com; VirusTotal 16-18/92
  • Weebly-hosted phishing pages (13 Nov 2026 cluster)
Reported Nov 12, 20261 report

Results reflect reports submitted to Scammers.com. Entries marked “Unverified” have not yet been reviewed. A listing is not a finding that any person or business committed fraud.