mailer-xfinity[.]weebly[.]com

mailer-xfinity.weebly.com is currently listed as an active generic phishing infrastructure with an elevated risk rating. The domain resolves to the IPv4 address 74.115.51.9, which is the sole network indicator observed. Both PhishDestroy and OpenPhish have issued blocks against the domain, and it appears on two additional security blocklists, indicating that multiple threat‑intelligence feeds have identified it as malicious. VirusTotal analysis shows that 18 of 91 scanned security vendors issued a detection for the domain, confirming that a substantive portion of the scanning community considers it malicious.

No public SSL certificate details, HTTP status codes, or page‑title metadata have been disclosed, so the exact content hosted at the URL remains unverified. The lack of visible page attributes prevents confirmation of the phishing lure or target brand, but the classification as generic phishing is supported by the blocklist entries and vendor detections. Defenders should immediately deny network connections to 74.115.51.9, add mailer‑xfinity.weebly.com to DNS‑based blocklists, and ensure that endpoint protection solutions receive the VirusTotal detection count.

Continuous monitoring of the IP address for any changes in hosting or additional payloads is advised, as well as periodic re‑scans of the domain to capture any evolution of the malicious content. Organizations that employ email filtering should treat any messages containing links to this domain as high‑confidence phishing and quarantine or reject them. Because the underlying web content has not been publicly analyzed, further investigation using a sandboxed browser or request‑capture tool is recommended to determine the exact credential‑stealing mechanisms, if any, employed by the site.