emailsahwservice[.]weebly[.]com

This domain is a phishing site designed to mimic Shaw.ca, a legitimate Canadian telecommunications provider. Analysis indicates the site presents a fraudulent login portal to harvest user credentials, including usernames, passwords, and potentially payment details. The site employs social engineering tactics, such as urgent account verification messages, to trick visitors into entering sensitive information. Infrastructure analysis reveals multiple red flags confirming its malicious nature. The domain was created on March 29, 2006, but the subdomain emailsahwservice.weebly.com is a recent construct hosted on Weebly’s platform, a common tactic to exploit free hosting services. It is registered through Safenames Ltd and resolves to IP address 74.115.51.8. Notably, 19 out of 95 security vendors on VirusTotal flag this domain as malicious, and it appears on two security blocklists, including PhishDestroy and OISD. The site uses Let’s Encrypt SSL certificates to appear legitimate, a frequent technique in phishing campaigns. If you visited emailsahwservice.weebly.com or entered any information on the site, immediate action is required. First, change the passwords for any accounts associated with Shaw or other services where the same credentials may have been reused. Enable multi-factor authentication where available to add an extra layer of security. Monitor financial statements and credit reports for unauthorized activity, as stolen credentials can lead to identity theft or financial fraud. Report the incident to your internet service provider and consider filing a complaint with cybersecurity authorities to help prevent further exploitation.