xfinity-101175[.]square[.]site

This domain, xfinity-101175.square.site, poses a significant risk as a credential theft operation designed to impersonate Xfinity, a major telecommunications provider. Visitors to this site are presented with fraudulent login interfaces that mimic legitimate Xfinity portals, with the intent of harvesting usernames, passwords, and potentially other sensitive account details. The threat extends beyond immediate data loss, as compromised credentials may be used for unauthorized access to linked services, financial fraud, or further targeted phishing attacks. The site’s infrastructure and impersonation tactics indicate a deliberate attempt to exploit trust in the Xfinity brand, making it particularly dangerous for unsuspecting users. Analysis indicates that this domain was registered through MarkMonitor, Inc. on February 21, 2026, a date that deviates from typical registration patterns and may suggest an attempt to evade detection or scrutiny. The domain resolves to the IP address 74.115.51.5, which is associated with Weebly, Inc. (AS27647) and located in the United States. At the time of assessment, 17 out of 95 security vendors on VirusTotal had flagged this domain as malicious, while it also appeared on one security blocklist. The SSL certificate, issued by Let’s Encrypt, provides basic encryption but does not validate the legitimacy of the site’s content or operators. These technical indicators, combined with the domain’s current offline status, suggest a coordinated effort to deploy and subsequently dismantle phishing infrastructure. If you or someone you know visited xfinity-101175.square.site and entered any login credentials or personal information, immediate action is required to mitigate potential harm. First, change the passwords for any accounts that may have been exposed, prioritizing those linked to financial services, email, or other high-value platforms. Enable multi-factor authentication (MFA) wherever possible to add an additional layer of security. Monitor accounts for unauthorized activity, such as unfamiliar transactions, password reset emails, or login attempts from unknown devices. If financial information was entered, contact the relevant institution to report potential fraud and request account monitoring or freezing. Finally, consider running a full scan of your device using updated security software to detect and remove any malware that may have been installed during the visit.