xfinityys[.]weebly[.]com

This domain, xfinityys.weebly.com, poses a credential theft threat by mimicking legitimate Xfinity login portals. The site displays a fraudulent 'sign in to your account' page designed to harvest user credentials, including usernames, passwords, and potentially multifactor authentication codes. Analysis indicates the domain specifically targets customers of the telecommunications provider by exploiting brand recognition to facilitate unauthorized account access or identity fraud. Infrastructure analysis reveals the domain was registered on March 05, 2026, through Safenames Ltd, an unusually future-dated creation timestamp suggesting potential obfuscation techniques. It resolves to IP address 74.115.51.9 under AS27647 (Weebly, Inc.) and uses a Let's Encrypt SSL certificate with serial number E8. Detection metrics show 17 out of 95 security vendors on VirusTotal flag the domain as malicious, while one commercial blocklist has actively listed it. The page title 'sign in to your account' directly correlates with known phishing templates used in previous credential harvesting campaigns. If interaction with this domain occurred, immediate remediation steps should be taken. Users should terminate any active sessions and change passwords for all accounts accessed from the same device or network segment. Enable multifactor authentication on critical accounts if not already implemented. Monitor financial statements and account activity for unauthorized transactions, particularly those associated with the targeted brand. Network administrators should block the IP address 74.115.51.9 at perimeter security devices and add the domain to web filtering policies. Preserve any logs or screenshots of the interaction for potential incident response procedures, noting the domain's unique seed identifier e15bd1 for correlation with other security events.