comcastservermail[.]weebly[.]com

Analysis of comcastservermail.weebly.com indicates a high-risk phishing domain actively targeting users through social engineering tactics. The domain, registered through Square, Inc., currently resolves to IP address 74.115.51.8 but lacks valid nameserver records, a common red flag in phishing infrastructure. Google Safe Browsing explicitly flags this domain for social engineering, aligning with its classification as a phishing threat. Detection vendors on VirusTotal further corroborate this assessment, with 10 out of 91 security tools identifying malicious activity.

The domain appears on at least one security blocklist, including PhishDestroy, which has blocked access to it. Infrastructure analysis reveals the site is hosted on Weebly’s platform, a service frequently exploited for phishing due to its ease of use and free hosting options. While the exact content of the page remains unconfirmed, the domain name suggests an attempt to impersonate Comcast, a telecommunications provider, likely to harvest credentials or personal information. Defenders should treat this domain as active and malicious, blocking it at the network level and monitoring for related indicators of compromise.

The absence of nameserver records and the use of a consumer-grade hosting service underscore the low-effort nature of this campaign, though its persistence and detection by multiple security tools indicate it remains a credible threat. No SSL certificate or additional hosting details were provided, limiting further infrastructure attribution. Organizations should prioritize user education around social engineering risks and ensure endpoint protection tools are updated to detect and block this domain.