xfinitymedia[.]weebly[.]com

On 2026-08-06 analysts observed that the sub‑domain xfinitymedia.weebly.com remains active and is being used for a generic phishing campaign. The site is hosted on the free‑hosting platform Weebly and resolves to the IPv4 address 74.115.51.8. Registration details show the domain was created through Square, Inc., and the authoritative nameserver lookup returned NS_NOT_FOUND, indicating that standard DNS records are not publicly disclosed. Google Safe Browsing has classified the URL as a social‑engineering threat, and the domain appears on one external blocklist.

Independent scanning on VirusTotal recorded detections from ten of ninety‑one antivirus and URL‑reputation engines, confirming that multiple security products consider the site malicious. The phishing‑specific feed PhishDestroy has already added the domain to its blocklist, but the domain continues to resolve, suggesting that the malicious infrastructure is still operational. No additional intelligence such as SSL certificate details, HTTP response codes, or page title information is currently available, limiting the ability to describe the exact content or credential‑harvesting techniques employed.

Defenders should proactively block traffic to 74.115.51.8 and to the host name xfinitymedia.weebly.com at network perimeter devices, update endpoint URL filtering lists with the domain, and monitor for any new resolutions or registration changes. Continuous re‑scanning with multi‑engine services is advised to capture any evolution in the threat profile. Organizations that rely on Xfinity Media branding should educate users about the lack of official affiliation with this Weebly sub‑domain and reinforce safe‑browsing practices.