urlDNA flagged hxxps://correo2026[.]weebly[.]com as possible phishing on Mastodon on 13 November 2026. Its screenshot shows a Spanish-language page headed "Inicia sesión para actualizar tu correo electrónico" (sign in…
correo2026.weebly.com
Weebly subdomain; form 'Inicia sesión para actualizar tu correo electrónico'
Weebly-hosted phishing pages (13 Nov 2026 cluster)
urlDNA flagged hxxps://haciehelp[.]weebly[.]com as possible phishing on Mastodon on 13 November 2026. Its screenshot shows a page branded with the logo of Mexico's Secretaría de Hacienda y Crédito Público (finance min…
haciehelp.weebly.com
Weebly subdomain; page titled 'HACIENDA HELP SERVICE' asking for email and passcode
Weebly-hosted phishing pages (13 Nov 2026 cluster)
The urlDNA scanning service posted on Mastodon on 13 November 2026 that hxxps://roundcube2026.weebly.com is possible phishing, linking its scan analysis. The domain also appears on the Phishing Army extended blocklist…
roundcube2026.weebly.com
Hosted on shared weebly.com domain
Weebly-hosted phishing pages (13 Nov 2026 cluster)
A phishing page imitating German bank DKB was found on a path of arrondhevie.bj, the official site of a Benin district, according to a researcher. The district is not the operator.
btinternet-104270.weeblysite.com
Hosted on shared weeblysite.com domain
Weebly-hosted phishing pages (13 Nov 2026 cluster)
PhishDestroy posted on Mastodon on 12 November 2026 that xxvv435[.]weebly[.]com is a phishing page. Its record describes an Onet Poczta login page with email and password fields, flagged by 19 of 92 VirusTotal engines…
PhishDestroy posted on Mastodon on 12 November 2026 that xncok12[.]weebly[.]com is a phishing page. Its record describes a GMX.NET-branded email and password login form, flagged by 17 of 92 VirusTotal engines. GMX is…
xncok12.weebly.com
Weebly subdomain; VirusTotal 17/92
Weebly-hosted phishing pages (13 Nov 2026 cluster)
PhishDestroy posted on Mastodon on 12 November 2026 that yourdailydelvry[.]weebly[.]com is a phishing page. Its record describes a DPD-branded parcel redelivery form titled "DPD (UK) - Your delivery experts." asking f…
PhishDestroy posted on Mastodon on 12 November 2026 that xfinitywebmailw3r[.]weebly[.]com is a phishing page. Despite the Xfinity name in the address, its record describes a Network Solutions-branded webmail login for…
xfinitywebmailw3r.weebly.com
Weebly subdomain; VirusTotal 15/92
Weebly-hosted phishing pages (13 Nov 2026 cluster)
PhishDestroy posted on Mastodon on 12 November 2026 three Weebly-hosted pages it flagged as phishing: zimbfree[.]weebly[.]com, zimbrafree9[.]weebly[.]com and zim-update2025[.]weebly[.]com. Its records describe Zimbra-…
zimbfree.weebly.com
Also zimbrafree9.weebly.com, zim-update2025.weebly.com; VirusTotal 16-18/92
Weebly-hosted phishing pages (13 Nov 2026 cluster)
Automated URL scanner urlDNA posted on Mastodon (infosec.exchange) on 11 November 2026 that mail-premium-updatess[.]weebly[.]com is a possible phishing page; the host is also on the Phishing Army blocklist. urlDNA's s…
Automated URL scanner urlDNA posted on Mastodon (infosec.exchange) on 11 November 2026 that ago-alefpa[.]weebly[.]com is a possible phishing page; the host is also on the Phishing Army blocklist. urlDNA's screenshot s…
Anti-phishing project PhishDestroy posted on Mastodon on 11 November 2026 that wppoctza[.]weebly[.]com and wppkfkdpl[.]weebly[.]com are phishing detections. Its analysis pages say both show a minimal login form with a…
wppoctza.weebly.com
Also: wppkfkdpl.weebly.com; hosted on shared weebly.com domain
Automated URL scanner urlDNA posted on Mastodon (infosec.exchange) on 10 November 2026 that customer-mail-com[.]weebly[.]com is a possible phishing page. The address uses mail.com's name on the Weebly site builder and…
customer-mail-com.weebly.com
Weebly-hosted phishing pages (13 Nov 2026 cluster)
The phishing-alert account @TheThreatWire posted on X on 10 November 2026 (Phishing Alert #131) that hxxps://sign-in-to-xfinity-3643.weebly.com/ is a phishing page impersonating Xfinity, the Comcast internet, TV and m…
sign-in-to-xfinity-3643.weebly.com
Hosted on shared weebly.com domain
Weebly-hosted phishing pages (13 Nov 2026 cluster)
CyberPulse reported a fake SAPO Mail login page at login-sapomail-pt.weebly.com that tries to collect Portuguese users' emails, phone numbers and passwords.
login-sapomail-pt.weebly.com
Weebly-hosted phishing pages (13 Nov 2026 cluster)
Reported Oct 13, 20261 report
Results reflect reports submitted to Scammers.com. Entries marked “Unverified” have not yet been reviewed. A listing is not a finding that any person or business committed fraud.