comcasxfinitylogin[.]weebly[.]com

comcasxfinitylogin.weebly.com is a subdomain of weebly.com. PhishDestroy first recorded this hostname on Jan 27, 2026. The stored content classification is credential phishing. The assembled evidence scores 95/100 (critical).

Two independent sources are positive: VirusTotal and Cloudflare Radar. VirusTotal recorded 17 detections among 93 engines: alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar, ESET, Emsisoft, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, Netcraft, Sophos, Trustwave, VIPRE, Webroot on Jul 18, 2026 at 18:45 UTC. Cloudflare Radar classified the hostname as malicious and assigned the categories phishing and security threats; its verdict timestamp was not retained. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. URLQuery recorded no positive detection. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. URLScan completed without a malicious verdict on Mar 26, 2026 at 11:27 UTC. PhishStats returned no feed match on Mar 2, 2026 at 00:08 UTC.

HTTP 404 was recorded on Aug 7, 2026 at 01:01 UTC; content was unavailable. Registration records for the registrable domain weebly.com list Squarespace Domains II LLC as the registrar. At collection time, the hostname resolved to 74.115.51.9 on AS27647 (WEEBLY - Weebly, Inc., US). The associated network metadata labels the endpoint as AS27647 Weebly, Inc. in Oakland, US. The stored server header is cloudflare. Captured page title: “Nur einen Moment…”. DOM analysis completed on Jul 29, 2026 at 04:10 UTC; stored DOM score 15/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Aug 2, 2026 at 04:15 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Let's Encrypt / E8 as the certificate issuer with validity through May 13, 2026; checked Mar 15, 2026 at 05:56 UTC.

No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. Taken together, the page content and independent findings support classifying this hostname as credential phishing.