xfinitymail1[.]weebly[.]com

Analysis conducted on August 06, 2026 identifies xfinitymail1.weebly.com as an active phishing domain targeting user credentials. The domain is hosted on Weebly infrastructure and resolves to IP address 74.115.51.9, associated with Square, Inc. as the registrar. Security vendor detections on VirusTotal indicate 11 of 91 engines flag the domain, though the specific detection logic remains unverified. Google Safe Browsing classifies the site as social engineering, while PhishDestroy has implemented blocking measures.

The domain appears on one security blocklist, though the specific list is not disclosed in available intelligence. Nameserver records are absent, which may indicate misconfiguration or deliberate evasion of standard DNS practices. No SSL certificate details or HTTP response codes are provided in current intelligence, limiting further assessment of encryption or server behavior.

The exact content of the phishing page remains unanalyzed, though the domain name suggests an attempt to mimic Xfinity login portals. Defenders should treat this domain as high-risk and implement blocking at DNS, IP, and URL levels. Further investigation into associated email campaigns, redirect chains, and payload delivery mechanisms is recommended to determine the full scope of the threat.