xfinityonlineweb[.]weebly[.]com

The domain xfinityonlineweb.weebly.com is currently active and has been classified as a high‑risk generic phishing site. Infrastructure analysis shows the domain is registered through Square, Inc. and resolves to the IPv4 address 74.115.51.8. The authoritative nameserver information could not be retrieved, as the NS lookup returned no results. The hosting appears to be provided by the Weebly platform, indicated by the “weebly.com” sub‑domain suffix, which is a common choice for low‑cost website creation services. Detection data reveal that ten out of ninety‑one security scanners on VirusTotal have flagged the domain as malicious, providing a modest but notable consensus among threat‑intelligence vendors. Google Safe Browsing has also marked the site for social engineering, a category that aligns with phishing behavior.

The domain is listed on a single security blocklist and is explicitly blocked by the PhishDestroy mitigation service, confirming that at least one external repository has taken preventive action. While the available evidence confirms malicious activity, several aspects remain uncertain. The lack of publicly visible nameserver records limits the ability to trace upstream DNS infrastructure or identify potential compromised name‑service providers. No SSL/TLS certificate details or HTTP response codes have been published, preventing assessment of transport‑layer security or potential redirection tactics. Additionally, no page‑title or content snapshot is available, so the exact phishing lure or targeted brand cannot be verified from the current data set.

Defenders should prioritize blocking outbound connections to 74.115.51.8 and adding xfinityonlineweb.weebly.com to local deny lists. Email security gateways ought to enforce URL filtering against the domain and apply social‑engineering heuristics consistent with Google Safe Browsing alerts.