sxfi.weebly.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of sxfi.weebly.com
sxfi.weebly.com appears to be a page hosted on Weebly's website-building platform rather than an official standalone corporate domain. Based on the screenshot, it presents itself as an Xfinity sign-in page and asks visitors to enter an email, username or mobile number along with a password. The page title is simply "Home," and the overall setup looks like a basic credential-entry form rather than a full telecommunications service portal.
The domain structure is notable because it uses a free or hosted subdomain under weebly.com instead of an official brand-owned domain for a major telecom login experience. The visible branding and login prompt suggest the page may be attempting to imitate a telecommunications account portal, while the underlying hosting indicates it is operated through a third-party site builder account rather than directly by the brand shown on the page.
Safety Assessment for sxfi.weebly.com
Multiple independent security signals indicate elevated risk at the time of this scan. The domain was flagged by 20 out of 91 security engines, and several web-classification providers categorized it as phishing or fraud-related. In addition, major threat-database checks showed listings for social-engineering or phishing activity, which is a stronger warning sign than a generic heuristic match. The screenshot also shows a login form branded as Xfinity on a Weebly subdomain, which may indicate an attempt to collect account credentials while resembling a legitimate telecommunications sign-in page.
The malware scan did not report confirmed malicious files, but it did attach a generic suspicious label to the domain and several internal resources. That signal alone would be low confidence, yet here it is outweighed by the broader multi-engine phishing consensus and blacklist listings. The domain's IP address is also listed on one mail-reputation blocklist, which is a secondary cautionary signal but not the main reason for concern.
Based on these findings, this website may pose potential risks to visitors, particularly anyone asked to enter login credentials.
Technical Description
The site is served over HTTPS with a valid Let's Encrypt certificate that was active at the time of scanning, and it appears to be hosted by Weebly with traffic routed through Cloudflare infrastructure. The reported server IP is 74.115.51.8 in Oakland, United States. DNSSEC is not enabled for the domain, which is common but means DNS responses do not benefit from that additional integrity layer.
From a technical perspective, the main concern is not TLS configuration but the mismatch between the displayed brand login experience and the underlying hosted subdomain on a site-builder platform. The page also appears lightly built, with a generic title and limited metadata, which can be consistent with disposable phishing pages. No confirmed malware payloads were identified in the scanned files at the time of analysis, but the broader reputation data remains strongly negative.
Share your experience with this website. Was it safe? Did you encounter any issues?