c0mcast[.]webflow[.]io

This domain, c0mcast.webflow.io, is actively flagged as a high-risk phishing site targeting user credentials. Analysis indicates the page title is explicitly set to 'c0mcast,' suggesting an attempt to mimic a telecommunications provider. The domain resolves to IP address 172.64.151.8 and is hosted on infrastructure managed by Webflow, a platform frequently abused for rapid phishing deployment due to its ease of use and SSL certificate provisioning. The SSL certificate is issued by Google Trust Services, which does not inherently validate the legitimacy of the site content. As of July 17, 2026, 15 of 95 security vendors on VirusTotal have detected this domain as malicious, reinforcing its classification as a phishing threat. The domain remains active, and no takedown actions have been observed. The exact phishing kit or targeted brand beyond the page title is not confirmed in available intelligence, though the spelling variation ('c0mcast') aligns with common obfuscation tactics to evade detection while maintaining visual similarity to the legitimate domain. Defenders should treat this domain as hostile. Block resolution to 172.64.151.8 at the network level and add the domain to web filtering rules. Monitor for user reports of credential submission or redirect chains involving this address. If internal logs indicate prior access, initiate password reset procedures for affected accounts and review authentication logs for anomalous activity. No further infrastructure details are available to determine hosting provider or geographic origin beyond the resolved IP.