xfinity-updateform.square.site
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of xfinity-updateform.square.site
This domain appears to be a page hosted on Square's website-building platform under the square.site subdomain space. The page title and visible branding reference Xfinity, and the screenshot shows a simple sign-in form requesting a full name, email address, and password, presented as an Xfinity login page.
Based on the available content, this does not appear to be an official standalone Xfinity-owned domain. Instead, it appears to be a third-party hosted page using Square/Weebly infrastructure while displaying Xfinity branding. That combination may indicate an impersonation-style login form rather than a normal customer portal operated directly by the telecommunications provider.
Safety Assessment for xfinity-updateform.square.site
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 14 out of 89 security engines, with many of those detections classifying it as phishing, and it was also listed by a major safe-browsing database for social-engineering activity. In addition, the screenshot shows a credential-entry form branded as Xfinity on a square.site subdomain rather than on an official Xfinity web property, which may indicate an attempt to collect user login details through brand impersonation.
The malware scan did not identify malicious files in the limited set of scanned resources, but that does not offset the stronger phishing-related indicators. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal on its own, yet it adds a small amount of additional caution in context. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted by Weebly, Inc. on Square/Weebly infrastructure and is served behind a Cloudflare web server. It presents a valid Let's Encrypt SSL certificate expiring in December 2026, which means the connection appears to be encrypted in transit, but HTTPS alone does not verify that the page is legitimate.
The subdomain has existed for several years within the square.site ecosystem, and DNSSEC appears to be unsigned. No malicious files were flagged in the provided file scan, but the main technical concern is not exploit delivery; it is the apparent use of a hosted form page that imitates a well-known brand login experience.
Share your experience with this website. Was it safe? Did you encounter any issues?