comcastservice-update[.]weebly[.]com

Analysis indicates that comcastservice-update.weebly.com is an active credential phishing domain targeting Comcast users, as of August 6, 2026. The domain is hosted on Weebly's infrastructure, registered through Square, Inc., and resolves to IP address 74.115.51.9. Infrastructure review reveals no assigned nameservers, a common tactic to obscure ownership or hosting relationships. The domain appears on one security blocklist (PhishDestroy) and is flagged by 10 of 91 security vendors on VirusTotal, confirming its malicious classification.

No evidence of Safe Browsing or Open Threat Exchange (OTX) listings is present in the available data, though this does not imply benign status. The domain remains active, with no takedown or suspension observed. The exact content of the phishing page is not yet analyzed, but the subdomain naming convention ('comcastservice-update') strongly suggests an attempt to impersonate Comcast customer service portals for credential harvesting. Defenders should treat this domain as high-risk.

Recommended actions include blocking the domain and its resolving IP (74.115.51.9) at the perimeter, updating endpoint protection rules, and alerting users to avoid interaction. If internal telemetry confirms exposure, initiate incident response protocols for credential compromise. Given the domain's registration under a legitimate hosting provider (Weebly/Square), monitoring for similar subdomain patterns (e.g., [brand]-update.weebly.com) may help preempt related campaigns.