xfinityloginservice[.]weebly[.]com

The domain xfinityloginservice.weebly.com is presently classified as a credential phishing site targeting users of the Xfinity service. Infrastructure analysis shows the domain resolves to the IP address 74.115.51.9, and its registration was completed through Square, Inc., a known registrar for many disposable and low‑cost web services. The domain appears on at least one security blocklist and is actively listed by PhishDestroy, confirming that defensive feeds consider it malicious. Google Safe Browsing flags the site for social engineering, a categorization that aligns with credential‑theft activity.

VirusTotal scans have recorded detections from ten out of ninety‑one security vendors, providing independent confirmation of malicious intent. Nameserver information is unavailable (NS_NOT_FOUND), limiting insight into the hosting provider’s control plane. No public SSL/TLS details, HTTP response codes, or page‑title metadata have been disclosed in the available intelligence, leaving those aspects unverified.

Given the convergence of blocklist entries, Safe Browsing alerts, and multiple vendor detections, defenders should treat traffic to and from this domain as hostile. Recommended mitigation steps include adding the domain and its resolved IP address to network‑level deny lists, enforcing web‑gateway filtering for known phishing indicators, and monitoring for any anomalous authentication attempts that reference the Xfinity brand. Continuous re‑evaluation is advised, as additional observations—such as changes in DNS records or new vendor detections—may further clarify the threat landscape surrounding this infrastructure.