Security Scan: Sign in to Xfinity

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9c5acd09-aa6c-4a6b-8b80-9cb3f3f8a785 Domain and IP registration (RDAP)/api/v1/rdap/9c5acd09-aa6c-4a6b-8b80-9cb3f3f8a785How often this domain was scanned/api/v1/domain/stats/xdigitalxflnltyappsute-web.vercel.app Scan history for this domain/api/v1/domain/history/xdigitalxflnltyappsute-web.vercel.app?limit=15

This website contacted 20 IPs in 4 countries across 13 domains to perform 28 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://www.xdigitalxflnltyappsute-web.vercel.app/

Effective URL:

https://xdigitalxflnltyappsute-web.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Cloned Xfinity sign-in hosted on a vercel.app subdomain, flagged by Safe Browsing for social engineering and containing a Telegram bot token for data exfiltration. Do not enter credentials.

Risk Factors (5)

Google Safe Browsing threat: Social Engineering

Brand impersonation of Xfinity/Comcast on a mismatched vercel.app subdomain

Telegram bot token in inline script enabling exfiltration of collected data

Anonymous shared-hosting subdomain with unknown creation date

Domain not in Cisco Umbrella top 1M despite claiming a major brand

Domain age information unavailable

Details

Page Title

Scan Type

public

Domain Name Analysis

The domain 'www.xdigitalxflnltyappsute-web.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'www.xdigitalxflnltyappsute-web'. The second-level label 'vercel' is 6 characters long split between two vowels and four consonants. It segments into two words: ver, cel. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.72s

Total Load Time

1.9 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:55%

Script:Latin

Direction:ltr

Detection Details

Text Length:5,409 chars

Detector Agreement:100%

Website Classification

Primary Category

healthcare medical61% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

healthcare medical

61%

technology software

49%

finance banking

43%

documentation technical

38%

e-commerce shopping

31%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	216.198.79.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	184.30.220.40Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
1	23.197.131.194Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
1	23.51.111.129Akamai · CDN	Aubervilliers, Île-de-France, France	AS16625Akamai Technologies, Inc.
1	104.26.12.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	23.41.253.21Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
1	92.123.104.24Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	99.80.230.66Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
1	23.52.181.12Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
28	20	-	-