mailxfinty[.]weebly[.]com

Analysis conducted on August 06, 2026 confirms that mailxfinty.weebly.com is an active phishing domain designed to harvest user credentials. Infrastructure analysis reveals the domain is hosted on IP address 74.115.51.9 and registered through Square, Inc. The domain currently resolves, though its nameservers are not found, which may indicate recent changes or evasion tactics. Google Safe Browsing has flagged the site for social engineering, a classification consistent with credential-theft phishing. The domain appears on one security blocklist, specifically PhishDestroy, and is detected by 10 of 91 security vendors on VirusTotal, confirming its malicious status.

The exact content and target of the phishing page have not yet been fully analysed, but the available evidence points to a generic credential-theft operation rather than a brand-specific impersonation. No brand name or specific scam category (e.g., banking, shipping, or crypto) is identified in the current data. The domain remains active as of the report date, posing an ongoing risk to users who may encounter it through phishing emails, malicious ads, or compromised links. Defenders should treat this domain as high-risk and implement immediate blocking at the DNS, proxy, or endpoint level.

Network traffic to 74.115.51.9 should be monitored or restricted, particularly for connections originating from user endpoints. Given the domain's registration under Weebly (a platform frequently abused for phishing), organisations should review logs for any subdomains or pages hosted on Weebly infrastructure that may evade initial blocklists. Security teams are advised to correlate this domain with recent phishing campaigns and check for associated email headers, redirect chains, or payload delivery mechanisms.