updatexfinity.weebly.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of updatexfinity.weebly.com
This domain appears to be a user-created page hosted on the Weebly website-building platform rather than an official corporate domain for Xfinity or Comcast. The page title and visible branding suggest it is presenting itself as an Xfinity-related login or account-update page, with a sign-in form requesting an email, mobile number or username, and password.
Based on the domain structure, the site is operating as a subdomain under weebly.com, which means it may be controlled by an individual site creator using Weebly hosting rather than by the telecommunications provider whose branding appears on the page. The content and categories associated with the scan indicate that the page may be intended to imitate a telecommunications account portal.
Safety Assessment for updatexfinity.weebly.com
Multiple scan signals indicate elevated risk at the time of this scan. The domain was flagged by 20 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. In addition, major threat-database checks included listings for social-engineering activity, and another phishing database also listed the URL. The page screenshot shows a login form using Xfinity branding on a Weebly subdomain, which may be consistent with credential-harvesting behavior rather than a legitimate customer portal.
The malware scan did not identify malicious files, but it did apply a generic suspicious heuristic to the domain and several internal links. That clean file result does not outweigh the broader phishing consensus from multiple independent scanners and blacklist sources. The domain's IP address was also listed on one mail-reputation blocklist, which is a weaker signal on its own but adds a small amount of caution in context.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was served over HTTPS with a valid Let's Encrypt certificate, and the observed infrastructure appears to be hosted by Weebly with Cloudflare in front of the origin. DNSSEC was not enabled at the time of this scan, and the nameservers point to AWS-managed DNS infrastructure.
From a technical perspective, the main concern is not TLS configuration but the mismatch between the hosted subdomain and the brand presented on the page. A branded login page on a third-party site-builder subdomain may be a warning sign when combined with phishing detections and social-engineering blacklist listings.
Share your experience with this website. Was it safe? Did you encounter any issues?