mailerxfinity[.]weebly[.]com

Analysis of the domain mailerxfinity.weebly.com indicates an active phishing campaign targeting user credentials, classified as high risk. The domain is hosted on Weebly infrastructure, registered through Square, Inc., and resolves to the IP address 74.115.51.9. Google Safe Browsing has flagged this domain for social engineering, a classification consistent with credential harvesting attempts. As of August 6, 2026, the domain remains operational, with no nameservers detected, suggesting potential misconfiguration or deliberate obfuscation of hosting details.

VirusTotal reports that 10 out of 91 security vendors have flagged this domain, indicating a moderate level of detection but not yet widespread consensus across all engines. The domain appears on at least one security blocklist, specifically PhishDestroy, which further corroborates its malicious classification. The absence of additional blocklist entries may reflect either a recent deployment or limited visibility in threat intelligence feeds. Infrastructure analysis reveals that the domain leverages Weebly’s platform, a common tactic among phishing actors due to its ease of use and free hosting capabilities.

While the exact content of the phishing page has not been analyzed, the combination of the domain name and Google Safe Browsing’s social engineering flag strongly suggests an attempt to impersonate Xfinity, a telecommunications brand. Defenders should treat this domain as a confirmed phishing threat and prioritize blocking it at the network and endpoint levels. Monitoring for related subdomains or IP-based indicators (74.115.51.9) may help identify additional malicious infrastructure. Given the domain’s active status and detection by multiple vendors, immediate containment actions are recommended to prevent credential theft or further compromise.