connectt-xfinitys-auth[.]weebly[.]com

The domain connectt-xfinitys-auth.weebly.com was identified as a high-risk brand impersonation phishing site, specifically targeting Google. Despite its page title claiming to be an Xfinity sign-in, the threat analysis confirms Google as the brand target, indicating a multi-brand credential harvesting scheme. This domain was registered through MarkMonitor, Inc. on April 23, 2026, and resolved to IP address 74.115.51.9. VirusTotal flagged it with 22 out of 95 security vendors marking it as malicious, and Google Safe Browsing listed it as phishing. It appeared on one security blocklist, and its SSL certificate was issued by Let's Encrypt (serial E8), lending a false sense of legitimacy.

The domain is currently offline, having been taken down after detection. PhishDestroy assesses that while the immediate threat has been neutralized, users who may have visited the site prior to takedown could have compromised their credentials. It is recommended that any individuals who interacted with this domain change their passwords immediately and enable two-factor authentication on affected accounts. Vigilance against similar spoofed domains remains advised, as phishing campaigns often reuse infrastructure under new names.