comcastupdate1[.]weebly[.]com

Analysis as of August 06, 2026 confirms that comcastupdate1.weebly.com is actively used for credential phishing. The domain is registered through Square, Inc., and resolves to the IPv4 address 74.115.51.8. Infrastructure analysis shows the hosting provider is Weebly, a popular website‑builder service, which often shares IP space among many customer sites, making IP‑based blocking less precise but still advisable. The domain appears on a single security blocklist and is explicitly blocked by PhishDestroy, indicating that at least one trusted anti‑phishing feed has identified it as malicious.

Google Safe Browsing classifies the site under the “social engineering” category, reinforcing the phishing assessment. VirusTotal scans have returned 11 detections out of 91 participating security vendors, confirming that multiple antivirus and URL‑reputation engines recognize the site as malicious. The lack of publicly visible nameserver information (NS_NOT_FOUND) limits attribution of the underlying DNS infrastructure, but the presence of the domain on a blocklist and its detection by multiple vendors provide sufficient evidence of malicious intent. Defenders should add comcastupdate1.weebly.com to domain blocklists across perimeter and endpoint solutions, and consider blocking the associated IP address 74.115.51.8, especially in environments where Weebly traffic is not required.

Continuous monitoring of the IP’s reputation is recommended, as shared hosting may cause collateral false positives. Email security gateways should be configured to flag communications referencing “comcastupdate1.weebly.com” or containing URLs that resolve to the same IP, and users should be educated about the Google Safe Browsing warning for social engineering attempts. Because the registrar information is publicly available, law‑enforcement notification to Square, Inc. may facilitate takedown actions.