Copy the complete raw source of the email, including headers, into a new message. Add the words "phishing email" to the subject, and send it to email@example.com. Send a second copy to firstname.lastname@example.org.
See the "Report a suspicious email, text or phone message" link on https://www.bankofamerica.com/privacy/report-suspicious-communications.go, and the "Report Spam and Phishing Emails" link on https://constantguard.xfinity.com/help/report-abuse/. Note that mail to Comcast's Abuse address sometimes bounces when they fall behind in complaint processing and the account goes over quota.