comcastmailupgrade[.]weebly[.]com

This domain, comcastmailupgrade.weebly.com, is actively flagged as a high-risk phishing site targeting Comcast users. Infrastructure analysis reveals the domain is hosted on Weebly's platform, a common vector for low-effort phishing campaigns due to its free hosting and ease of deployment. The domain resolves to IP address 74.115.51.8, which has been associated with prior phishing activity but lacks a definitive malicious reputation at the IP level alone. No nameservers are currently configured, a red flag indicating potential misconfiguration or intentional evasion of DNS-based detection mechanisms. The domain is registered through Square, Inc., which aligns with Weebly's parent company, but no anomalous registration details are present in the available data. Google Safe Browsing explicitly classifies the site as engaging in social engineering, a designation typically reserved for pages designed to trick users into divulging credentials or sensitive information.

This aligns with the domain name, which suggests a fraudulent Comcast mail upgrade or account verification scheme. At the time of this report, the domain appears on one security blocklist and is actively blocked by PhishDestroy, a specialized anti-phishing service. VirusTotal scans indicate that 11 of 91 security vendors flag the domain as malicious, providing moderate but not overwhelming consensus. The absence of additional context—such as SSL certificate details, HTTP response headers, or page content analysis—limits the ability to determine the exact phishing kit or payload in use. However, the combination of a Weebly-hosted domain, a Comcast-themed lure, and social engineering flags strongly suggests a credential harvesting operation.

Defenders should treat this domain as an active threat. Network-level blocking of the domain and its resolving IP (74.115.51.8) is recommended for organizations with Comcast user bases.