c0mcast0[.]weebly[.]com

The domain c0mcast0.weebly.com is currently flagged as an active credential theft site targeting users of Xfinity, a major telecommunications brand. Analysis indicates the site is designed to impersonate the legitimate Xfinity login portal, tricking victims into entering sensitive account credentials. The page title explicitly reads 'Sign in to Xfinity,' reinforcing the deception through brand impersonation tactics. Infrastructure analysis reveals the domain resolves to the IP address 74.115.51.8 and was originally registered on March 29, 2006, though the malicious subdomain appears to have been recently deployed. The domain is registered through MarkMonitor, Inc., a registrar commonly used for both legitimate and fraudulent purposes. As of the latest scan, the domain has been flagged by 0 of 95 VirusTotal vendors, indicating it has not yet been widely detected by security engines. The SSL certificate is issued by Let's Encrypt, a common provider for both benign and malicious sites, providing a false sense of security to potential victims. The domain remains active and under investigation, with no confirmed takedown or blocklist inclusion at this time. Organizations and users are advised to block access to c0mcast0.weebly.com at the network level and implement email filtering rules to prevent phishing attempts linking to this domain. End users should be educated to verify the authenticity of login portals, particularly those requesting Xfinity credentials, by checking the URL for anomalies such as misspellings or unusual subdomains. Security teams are encouraged to monitor for connections to 74.115.51.8 and correlate logs for potential credential theft incidents tied to this infrastructure.