xfinityorginfo[.]weebly[.]com

This domain, xfinityorginfo.weebly.com, operates as a credential harvesting phishing site designed to mimic legitimate telecommunications service portals. Analysis indicates the site targets users by presenting fraudulent login interfaces that collect account credentials, payment details, or personal information under false pretenses. The site employs social engineering tactics, as confirmed by Google Safe Browsing's SOCIAL_ENGINEERING classification, to deceive visitors into disclosing sensitive data. Infrastructure analysis reveals the domain resolves to IP address 74.115.51.9 and is hosted on Weebly's platform, a common vector for phishing campaigns due to its ease of deployment. The domain was registered through MarkMonitor Inc. on March 29, 2006, though the phishing content appears to be a recent addition. Detection metrics show 14 out of 95 security vendors on VirusTotal flag the domain as malicious, with a Let's Encrypt SSL certificate providing a false sense of security to unsuspecting users. If a user has visited xfinityorginfo.weebly.com or entered credentials on the site, immediate action is required. First, revoke any entered credentials by changing passwords for the affected account and any other services where the same credentials were reused. Enable multi-factor authentication where available to add an additional layer of security. Monitor the affected account for unauthorized activity, such as unfamiliar transactions or login attempts. Report the incident to the legitimate service provider and consider notifying relevant authorities or cybersecurity response teams to aid in mitigation efforts.