xfinityorgltd[.]weebly[.]com

The domain xfinityorgltd.weebly.com is identified as a generic phishing site with an elevated risk level. It appears to be impersonating the Xfinity brand, a well-known provider of internet, phone, and television services. There is no evidence of a specific drainer kit being used, but the domain has been taken offline, indicating that it was likely used to conduct phishing attacks.

Analysis of the domain reveals that it has a VirusTotal score of 19/95, suggesting that a significant number of security vendors recognize it as a threat. The domain is registered through MarkMonitor, Inc., and resolves to the IP address 74.115.51.8, which is located in the United States and is associated with AS27647 Weebly, Inc. The domain was created on March 29, 2006, and its SSL certificate is issued by Let's Encrypt. It is listed on one security blocklist and is known to be blocked by PhishDestroy, a security service.

The current status of xfinityorgltd.weebly.com is offline, which suggests that it has been taken down either by the hosting provider or the registrar in response to the identified threat. Despite its offline status, the remaining risk is still elevated due to the potential for the domain to be reactivated or for similar domains to be used in future phishing campaigns. Users are advised to exercise caution and verify the legitimacy of any communication purportedly from Xfinity before providing any sensitive information.