xfinity-mail-update[.]weebly[.]com

Analysis as of August 06, 2026 indicates that the domain xfinity-mail-update.weebly.com is actively being used for credential phishing. The site has been blocked by the PhishDestroy sinkhole, confirming that malicious traffic has been observed and redirected. VirusTotal reports nine detections out of ninety‑one submitted scanners, demonstrating that multiple AV engines have flagged the domain as malicious. Registration information shows the domain was provisioned through Square, Inc., a legitimate e‑commerce platform, which suggests that the attacker leveraged a reputable registrar to obscure ownership details.

The domain’s authoritative name servers could not be resolved (NS_NOT_FOUND), and no further DNS delegation data is available. DNS resolution points to the IPv4 address 74.115.51.8, which is currently reachable and associated with an active web server. The IP address appears on a single public security blocklist, providing an additional indicator that the host is being monitored for abuse.

No SSL certificate details, HTTP status codes, Safe Browsing verdicts, or page title information are present in the available intelligence, leaving the exact content of the landing page unverified. Consequently, defenders should treat any communications referencing “xfinity mail update” as potentially malicious, enforce strict URL filtering for the full host, and consider blocking traffic to 74.115.51.8 at the network perimeter. Monitoring for future changes in DNS records, additional blocklist listings, or new VirusTotal detections is recommended to maintain situational awareness.