Security Scan: xfinity

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/238831d4-aaee-46c0-a854-0b517776c789 Domain and IP registration (RDAP)/api/v1/rdap/238831d4-aaee-46c0-a854-0b517776c789How often this domain was scanned/api/v1/domain/stats/xfinityupdates.vercel.app Scan history for this domain/api/v1/domain/history/xfinityupdates.vercel.app?limit=15

This website contacted 9 IPs in 1 country across 5 domains to perform 11 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://xfinityupdates.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

Confirmed Xfinity credential phishing on a Vercel subdomain, with a login form, multi-source threat-intel reports, and Telegram bot token exfiltration code.

Risk Factors (5)

Brand impersonation of Xfinity/Comcast on an unrelated hosting subdomain.

Credential-harvesting login form requesting an Xfinity ID and password.

Multi-source threat-intel phishing report against the primary domain.

Telegram bot token embedded in page script, consistent with credential exfiltration infrastructure.

Unranked, free-hosting subdomain with unknown actual creation date.

Domain age information unavailable

Details

Page Title

xfinity

Scan Type

public

Domain Name Analysis

The domain name 'xfinityupdates.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'xfinityupdates'. Count 6 characters in 'vercel' holding two vowels versus 4 consonants. It segments into 2 words: ver, cel. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

xfinity Sign in with your Xfinity ID By signing in, you agree to our Terms of Service and Privacy Policy. Let's cut your mobile bill in half Xfinity Internet customers can save big over T- Mobile,...

Page Load Overview

1.87s

Total Load Time

492 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:676 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking60% confidence

Type: static

Method: ml+structural

All Detected Categories

finance banking

60%

government public service

55%

technology software

47%

news media journalism

41%

adult content

40%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	104.26.2.143Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.110.95Google · CDN	United States	AS15169Google LLC
1	142.251.127.94Google · CDN	United States	AS15169Google LLC
1	172.67.68.11Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.3.143Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	9	-	-