Security Scan: Sign in to Xfinity

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f94a4c20-6ff3-47a3-8dea-ef0b6e3d43bb Domain and IP registration (RDAP)/api/v1/rdap/f94a4c20-6ff3-47a3-8dea-ef0b6e3d43bbHow often this domain was scanned/api/v1/domain/stats/xdigitalxflnltyappsute-web.vercel.app Scan history for this domain/api/v1/domain/history/xdigitalxflnltyappsute-web.vercel.app?limit=15

This website contacted 16 IPs in 4 countries across 13 domains to perform 27 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://www.xdigitalxflnltyappsute-web.vercel.app/

Effective URL:

https://xdigitalxflnltyappsute-web.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Cloned Xfinity sign-in hosted on a vercel.app subdomain, flagged by Safe Browsing for social engineering and containing a Telegram bot token for data exfiltration. Do not enter credentials.

Risk Factors (5)

Google Safe Browsing threat: Social Engineering

Brand impersonation of Xfinity/Comcast on a mismatched vercel.app subdomain

Telegram bot token in inline script enabling exfiltration of collected data

Anonymous shared-hosting subdomain with unknown creation date

Domain not in Cisco Umbrella top 1M despite claiming a major brand

Domain age information unavailable

Details

Page Title

Scan Type

public

Domain Name Analysis

Domain 'www.xdigitalxflnltyappsute-web.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'www.xdigitalxflnltyappsute-web'. Count 6 characters in 'vercel' holding 2 vowels versus 4 consonants. Segmentation suggests 2 words: ver, cel. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.84s

Total Load Time

1.9 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:55%

Script:Latin

Direction:ltr

Detection Details

Text Length:5,409 chars

Detector Agreement:100%

Website Classification

Primary Category

healthcare medical61% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

healthcare medical

61%

technology software

49%

finance banking

43%

documentation technical

38%

e-commerce shopping

31%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	184.30.220.40Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
1	104.82.107.94Akamai · CDN	Hamburg, Free and Hanseatic City of Hamburg, Germany	AS16625Akamai Technologies, Inc.
1	104.26.12.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	23.42.21.144Akamai · CDN	Munich, Bavaria, Germany	AS16625Akamai Technologies, Inc.
1	54.77.75.175Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
1	23.52.181.12Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
1	23.45.99.17Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
27	16	-	-