008963466[.]weebly[.]com

This domain is flagged as an elevated-risk phishing site specifically targeting poczta onet webmail users. Analysis indicates the site was designed to harvest login credentials through fraudulent webmail login interfaces, a common tactic in credential theft campaigns. Infrastructure analysis reveals the domain 008963466.weebly.com was registered on March 03, 2026, through Safenames Ltd and resolves to IP address 74.115.51.9, hosted on AS27647 (Weebly, Inc.) in the United States. The site appears on one security blocklist and is flagged by 17 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Let's Encrypt (serial E8), a common choice for both legitimate and malicious sites. The page title, 'poczta onet - Home,' directly mimics the legitimate poczta.onet.pl webmail service, increasing the likelihood of successful deception. Mitigation steps for this specific threat type include immediate blocking of the domain and associated IP (74.115.51.9) at the network perimeter. Security teams should deploy indicators of compromise (IOCs) across email gateways, web proxies, and endpoint protection systems to prevent user access. Given the domain's current offline status, monitoring for reactivation attempts is recommended. User awareness training should emphasize verifying domain authenticity before entering credentials, particularly for webmail portals. Organizations using poczta onet services should implement multi-factor authentication to reduce the impact of potential credential theft.