xfinityloginserver[.]weebly[.]com

Analysis of xfinityloginserver.weebly.com indicates a high‑risk credential phishing operation that remains active as of August 06, 2026. VirusTotal reports that 10 of 91 security vendors have flagged the domain, demonstrating multi‑engine consensus of malicious behavior. Google Safe Browsing classifies the site under social engineering, confirming that it is being used to harvest credentials. The domain resolves to the IPv4 address 74.115.51.8; no additional hosting context is available, but the address can be added to network blocklists to prevent outbound connections.

Registration was performed through Square, Inc., a legitimate registrar that can be leveraged by threat actors to obtain clean‑looking WHOIS records. Nameserver information is unavailable (NS_NOT_FOUND), which may hinder some DNS‑based reputation checks. The domain appears on a single security blocklist and is explicitly blocked by PhishDestroy, providing at least one source for automated mitigation.

Uncertainties remain regarding the exact phishing lure, page content, SSL/TLS configuration, and HTTP response codes, as no page title or content analysis is supplied. Defenders should therefore enforce a deny‑by‑default rule for the domain and its resolved IP, incorporate the domain into URL filtering and DNS sinkhole policies, and monitor for any DNS queries or outbound traffic to 74.115.51.8. Continuous feed updates from threat‑intel platforms that reference this domain will aid in detecting any future infrastructure changes.