comcastmailsignin[.]weebly[.]com

The domain comcastmailsignin.weebly.com has been identified as an active credential phishing site targeting Comcast mail users. Multiple threat intelligence sources have flagged this domain for malicious activity. Google Safe Browsing has classified the site as engaged in social engineering, indicating attempts to deceive users into divulging sensitive information. The domain is currently blocked by the security vendor PhishDestroy and appears on at least one recognized security blocklist. VirusTotal analysis shows that 11 out of 91 participating security vendors have flagged this domain for malicious content or behavior.

The domain was created on March 29, 2006, and is registered through Markmonitor Inc. It currently resolves to the IP address 74.115.51.8. The evidence suggests that the domain is being used to impersonate the Comcast brand, specifically targeting users attempting to sign in to their Comcast mail accounts. While the page's exact content has not yet been independently analyzed, the domain name, threat type designation, and detection by major security services provide a clear indication of its intent.

Defenders should implement immediate blocking of comcastmailsignin.weebly.com at the network and endpoint levels. Security awareness programs should notify users of the risks associated with this domain, particularly those within organizations using Comcast services. Monitoring for traffic to the associated IP address may reveal additional related threats. Continued vigilance is advised, as the domain remains active and poses a high risk of credential compromise.