Security Scan Report: sign-in-to-xfinity-3643.weebly.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 6 domains to perform 40 HTTP transactions. The main domain is weebly.com and was registered 20 years ago.

Submitted URL: https://sign-in-to-xfinity-3643.weebly.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Phishing page impersonating Xfinity on a Weebly subdomain, capturing Xfinity ID credentials via an obfuscated password field, corroborated by three HIGH phishing IDS alerts.

Risk Factors (5)
Brand impersonation of Xfinity on a non-official domain
Credential-harvesting form with unicode-obfuscated password field
Deceptive hostname containing the brand name and 'sign-in'
Multiple HIGH-severity phishing IDS signatures for Weebly phishing landings
Shared free-hosting subdomain with unknown creation date
Domain age information unavailable

Details

Page Title

xfinity.com

Scan Type

public

Domain Name Analysis

Domain 'sign-in-to-xfinity-3643.weebly.com' uses the commercial generic top-level domain (.com), featuring subdomain 'sign-in-to-xfinity-3643'. The core label 'weebly' covers 6 characters holding 2 vowels versus four consonants. Word splitting yields 2 words: wee, bly. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

xfinity Sign in with your Xfinity ID Email,mobile, or username Save $55/mo vs. Verizon, ATST, and T-Mobile Passwérd Mi t the most relia rk Coleulate savings see | Cut your mobile ep ~~ bill F...

Page Load Overview

1.94s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:65 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical42% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

healthcare medical
42%
government public service
40%
e-commerce shopping
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1074.115.51.9United States
AS27647Weebly, Inc.
5146.75.121.46Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
5142.251.155.119Google · CDNUnited States
AS15169Google LLC
5142.250.154.94Google · CDNUnited States
AS15169Google LLC
552.33.97.13Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
574.115.51.8United States
AS27647Weebly, Inc.
5142.251.154.119Google · CDNUnited States
AS15169Google LLC
407--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16BE219DCF76D6E344B320066F7AA75CFF43DE626DD82888CFAAD412257D6E40826058D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:/IRIOITIwIgIiKZgNDfIwIGI5IVJ7SqIRIOITIwIgIiKZgNDfIwIGI5IVJ7SKHPZ:/IRIOITIwIgIiKZgNDfIwIGI5IVJ7Sqf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:33092:BEAE6ChhNP5gn14oGaAQFFgxDEEojEZEAoQnE4glsQBKKcEgCuhHACuBYQgShLMY2KSERoAEEgsE2czBwmj4gj79dLJgJSm4

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff3f3d3f3f3c3ff
Perceptual Hash:e4649b93ce38c764
Difference Hash:1026262626069600
Wavelet Hash:dec2c2c2c2c2c3fe
Color Hash:07000000038

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data