comcast-mobile[.]webflow[.]io

The domain comcast-mobile.webflow.io is currently active and has been classified as a generic phishing threat. VirusTotal records indicate that 13 of 91 security vendors have flagged the domain, confirming that multiple independent detection engines recognize malicious behavior. The domain appears on a single security blocklist and is specifically blocked by PhishDestroy, demonstrating that at least one dedicated anti‑phishing service has taken preventive action.

Infrastructure analysis shows the domain resolves to IP address 104.18.36.248, which is hosted by Webflow, Inc. The registration information lists Webflow, Inc. as the registrar, and the DNS query for nameservers returned NS_NOT_FOUND, suggesting that standard nameserver records are not publicly resolvable or may be intentionally obscured. No additional data such as SSL certificate details, HTTP response codes, page title, or content analysis are available at this time, leaving the precise landing page characteristics unverified.

Defenders should consider adding the domain and its associated IP address to network‑level deny lists, monitoring DNS queries for anomalous resolution patterns, and employing URL filtering solutions that reference the known blocklist entry. Continuous re‑evaluation is advised, as the domain remains active and may evolve its hosting or delivery mechanisms.