xfinityloginconnect[.]weebly[.]com

The domain xfinityloginconnect.weebly.com is currently active and has been identified as a credential phishing infrastructure. The site is hosted on the Weebly platform, as indicated by the .weebly.com subdomain, and resolves to the IPv4 address 74.115.51.8. The registrar information shows the domain was registered through Square, Inc., and the authoritative name server lookup returned NS_NOT_FOUND, suggesting that the domain relies on Weebly's default DNS configuration. Threat intelligence feeds have flagged the domain: PhishDestroy has placed it on its blocklist, and it also appears on an additional security blocklist.

Google Safe Browsing classifies the site as a social engineering threat, and VirusTotal reports that nine out of ninety‑one scanning engines have identified the domain as malicious. These detections collectively indicate a high confidence that the domain is being used to harvest credentials. The infrastructure is relatively simple, with a single A record pointing to a public IP address, and no additional hosting or CDN services are observed.

Defenders should block network traffic to 74.115.51.8 and add the full domain to URL filtering policies. Monitoring for related subdomains on the same IP and for any future registration changes through Square, Inc. is advised. Because the site’s content has not been publicly analyzed, the exact phishing page layout remains unknown, but the existing detections warrant immediate remediation.