Security Scan Report: fresh-experiences-537560.framer.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 21 IPs in 2 countries across 8 domains to perform 392 HTTP transactions. The main domain is framer.app and was registered 6 years ago.

Submitted URL: https://fresh-experiences-537560.framer.app/

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Fake Xfinity sign-in page on a free framer.app subdomain, harvesting Xfinity credentials with a disguised (type=text) password field and Unicode evasion — confirmed credential phishing.

Risk Factors (5)
Impersonation of the Xfinity (Comcast) brand on a domain that is not xfinity.com
Credential-harvesting login form (email/username + password + Sign in)
Password field disguised as a text input to evade detection
Unicode/character confusion in form fields
Hosted on a free, instantly-created Framer subdomain with no reputation
Domain age information unavailable

Details

Page Title

Xfinity Sign In

Scan Type

public

Domain Name Analysis

You're looking at domain 'fresh-experiences-537560.framer.app' on the application-focused generic top-level domain (.app) with subdomain 'fresh-experiences-537560'. The registrable portion 'framer' spans 6 characters containing 2 vowels alongside 4 consonants. Tokenizing the label suggests 1 word: framer. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fresh-experiences-537560.framer.app/

Page Load Overview

0.53s
Total Load Time
4.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:238 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software49% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
49%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3231.43.160.6Aws · CLOUDNetherlands
AS16509Amazon.com, Inc.
1818.64.211.99Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
18143.204.181.40Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1865.9.130.22Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1865.8.131.73Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1831.43.161.6Aws · CLOUDNetherlands
AS16509Amazon.com, Inc.
18143.204.181.93Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
18143.204.181.70Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
18143.204.181.49Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1818.64.211.73Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
39221--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11E930F936159F064ACD7297EE75DE12C9D252140FF32C3CBA2AE825F41CDAF42252B6C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:/oyBVxVPL3ItieSlkXesVkJVlat9VyalVbVe9V4wPhs9HdyF8BG1XT:zWss1gF4G1XT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:97027:iBhhMAIFAAAKClJYLBiKGmAACIUks7WBIg01CgDDEBIIAwlgMWlDLVgXxUEQYqgMEEwIEwKgaBAxmkSACAMAkBSwILCwFDfS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7cfcefefffffe
Perceptual Hash:b333cecec4393988
Difference Hash:0848585818000000
Wavelet Hash:0f072f260a030f0e
Color Hash:N/A

Other Hashes

Crop Resistant:0848585818000000

Scan History

Scan history not available

Unable to load historical scan data