Security Scan Report: xfinity-145t.square.site

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 7 domains to perform 70 HTTP transactions. The main domain is square.site and was registered 7 years ago.

Submitted URL: https://xfinity-145t.square.site

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake Xfinity sign-in page hosted on a Square subdomain, harvesting email and password via a disguised password field; flagged for social engineering by Safe Browsing and as phishing by OpenPhish.

Risk Factors (7)
Brand impersonation of Xfinity on a non-official domain
Credential-collecting login form (email/username + password) on a free shared-hosting subdomain
Disguised password field (type='text' with password placeholder)
Unicode character confusion in form fields
Google Safe Browsing Social Engineering detection
OpenPhish phishing report on the primary domain
Domain unranked in Cisco Umbrella while claiming a major brand
Domain age information unavailable

Details

Page Title

Home | Xfinity

Scan Type

public

Domain Name Analysis

Domain 'xfinity-145t.square.site' uses the .site top-level domain and includes subdomain 'xfinity-145t'. The registrable portion 'square' spans 6 characters with 3 vowels and three consonants. It segments into one word: square. Median word length is six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xfinity-145t.square.site

Page Load Overview

2.87s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:412 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping53% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

e-commerce shopping
53%
technology software
29%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1074.115.51.5United States
AS27647Weebly, Inc.
10146.75.121.46Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
1032.185.215.106Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
1034.8.226.60Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1074.115.51.6United States
AS27647Weebly, Inc.
1074.115.51.4United States
AS27647Weebly, Inc.
1074.115.51.7United States
AS27647Weebly, Inc.
707--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T113F3C4D56618029C9147CAADEF2FFE05131FB5AAB5448980B98EC26C97CF8D2F71351C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:4LTk7H/mGCcPo6q9zq9tr9bg/GO+waERQ7HGgDDiiDsTYKuFsR8MLqUQQFsR8ML1:4s+gq9zq9ngezERQ7HFZDsjKP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:171574:GEhBH8AGoYBnJAAghCAgRCRMFBjvTAIAnklyx0FSLK6C0IEaETJLRC0ygNQFnAGsGKB5HQJRYjHQA36ALUIQSQAoQAhRAIgK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7c7e7ffffffe7
Perceptual Hash:f333626626663399
Difference Hash:0c0c140c08010908
Wavelet Hash:27030303f3f3fce4
Color Hash:N/A

Other Hashes

Crop Resistant:0c0c140c08010908

Scan History

Scan history not available

Unable to load historical scan data