xfinity-account-verify[.]weebly[.]com

On August 07, 2026 the domain xfinity-account-verify.weebly.com was observed actively serving credential phishing infrastructure. DNS resolution points to the IPv4 address 74.115.51.9, which is the sole host identified for this campaign. The domain is listed on two public security blocklists and has been incorporated into the feeds of PhishDestroy and OpenPhish, indicating that multiple anti‑phishing services are already blocking access. VirusTotal analysis shows that 15 of 91 scanned security vendors have flagged the domain as malicious, reinforcing the blocklist evidence.

The threat is classified as credential phishing, targeting user login credentials under an elevated risk rating. The campaign remains active according to the latest intelligence, and the unique seed identifier 73f3a0 links this observation to other related indicators. Defenders should add the domain and its resolving IP address to outbound deny lists, ensure that email filtering rules block messages containing the domain, and monitor network traffic for connections to 74.115.51.9.

Continuous re‑evaluation of the blocklist status is advised, as additional detections may surface. Organizations using web‑proxy or DNS filtering solutions should verify that the domain is present in their threat intelligence feeds and enforce blocking. Incident response teams should treat any authentication attempts to this domain as compromised and advise affected users to change credentials immediately.