simplest-watching-886115[.]framer[.]app

This domain, simplest-watching-886115.framer.app, is flagged for credential theft and is associated with the impersonation of the Xfinity brand. The domain likely aimed to trick users into entering their login credentials, which could then be harvested by the attackers for unauthorized access to accounts or further malicious activities.

Analysis indicates that simplest-watching-886115.framer.app has a VirusTotal score of 19/95, suggesting a significant level of detection by security vendors. The domain was registered through Framer and resolves to the IP address 31.43.161.6, which is located in the Netherlands and belongs to AS16509 Amazon.com, Inc. Google Safe Browsing has flagged this domain as phishing, and it appears on one security blocklist. The exact creation date is not provided, but the domain was taken offline as of the latest assessment.

The domain is currently offline, which reduces the immediate risk to potential victims. However, the infrastructure used to host the phishing site, particularly the IP address and registrar, may still pose a threat if reused in future campaigns. Security professionals and users are advised to remain vigilant and monitor for any signs of the domain being reactivated. Additionally, any credentials entered on this site should be immediately changed, and users should enable multi-factor authentication on all accounts to mitigate the risk of unauthorized access.