newsbwebmail[.]weebly[.]com

PhishDestroy has identified elevated risk activity associated with the domain newsbwebmail.weebly.com, which is currently hosting a generic phishing campaign. This threat leverages the false appearance of a legitimate webmail service to harvest user credentials, posing significant risk to individuals and organizations alike. The domain’s deceptive nature is compounded by its age, infrastructure choices, and widespread detection by security vendors. This domain was flagged by 19 out of 95 VirusTotal security vendors, indicating substantial malicious activity. Registered through MarkMonitor, Inc., the domain resolves to IP address 74.115.51.9 and operates using a Let's Encrypt SSL certificate. Initially created on March 29, 2006, it has since appeared on one known security blocklist and remains active. Despite its age, the presence of a trustworthy certificate issuer does not mitigate the inherent risks posed by this phishing host. To mitigate exposure to this threat, users should avoid accessing newsbwebmail.weebly.com or any associated login pages. Organizations are advised to implement network-level blocking for this domain and IP address, update email filtering rules to intercept phishing attempts, and educate staff on recognizing deceptive webmail login portals. Immediate action should be taken to revoke any credentials entered on this site and monitor for unusual account activity. Proactive threat hunting and DNS sinkholing can further reduce risk exposure.