comcastupdateservice[.]weebly[.]com

Analysis of the domain comcastupdateservice.weebly.com indicates active credential phishing infrastructure as of August 6, 2026. The domain is hosted on Weebly, a platform frequently exploited for phishing due to its free hosting and subdomain registration capabilities. Infrastructure analysis reveals the domain resolves to IP address 74.115.51.8, though no nameserver records (NS_NOT_FOUND) were detected, which may suggest misconfiguration or deliberate evasion of standard DNS practices. The domain is registered through Square, Inc., though no additional registrar details or registration date were provided in the available intelligence. Detection data from multiple security sources confirms malicious classification.

Google Safe Browsing explicitly flags the domain for social engineering, a designation consistent with credential harvesting tactics. Eleven of 91 security vendors on VirusTotal have flagged the domain, indicating moderate but not universal detection coverage. The domain also appears on at least one security blocklist, and PhishDestroy has implemented a block, further corroborating its malicious status. No Open Threat Exchange (OTX) pulses, SSL certificate anomalies, or HTTP response irregularities were reported in the available data, limiting visibility into additional infrastructure attributes. Defenders should treat this domain as high-risk for credential phishing, particularly given its association with a known ISP brand in the subdomain.

The absence of nameserver records does not preclude functionality, as the domain remains active and resolves to a live IP. Organizations are advised to block traffic to 74.115.51.8 and the domain itself at the network level, while monitoring for related subdomains or IPs that may emerge as part of the same campaign.