comcastonlinewebmail[.]weebly[.]com

Analysis of comcastonlinewebmail.weebly.com indicates that the domain is actively used for a generic phishing campaign and is currently classified as elevated risk. VirusTotal scans show that nine out of ninety‑one security vendors have flagged the domain as malicious, providing independent confirmation of its suspicious nature. The domain is listed on two reputable blocklists and has been explicitly blocked by PhishDestroy and OpenPhish, reinforcing the consensus that it is being used to lure victims. Infrastructure investigation reveals that the subdomain resolves to the IP address 74.115.51.9, which is associated with the Weebly hosting platform.

No additional hosting details such as ASN or geographic location are provided in the available intelligence, leaving the broader network context uncertain. The lack of publicly disclosed SSL certificate information or HTTP response codes suggests that further technical probing may be required to determine whether the site serves over HTTPS or presents additional indicators of compromise. Defenders should immediately add comcastonlinewebmail.weebly.com to domain blocklists across perimeter security devices, email gateways, and endpoint protection solutions.

Network monitoring rules should be created to alert on outbound connections to 74.115.51.9, and any internal traffic attempting to resolve the domain should be logged for investigation. Given the confirmed phishing classification and the presence on multiple blocklists, organizations are advised to treat any user‑initiated interaction with this domain as malicious, enforce multi‑factor authentication where possible, and educate users about the risks of unsolicited communications that reference Comcast services. Ongoing vigilance is recommended to capture any future changes in hosting or detection patterns that could affect the threat landscape.