Phishing detection: webmail-service-xfinity.fercel.app
Xfinity (Comcast) Screenshot
Investigate
Domain
webmail-service-xfinity.fercel.app1 CT host on apex
urlscan
VirusTotal
Whois
IP
64.239.109.193
ipinfo
Greynoise
URL
http://webmail-service-xfinity.fercel.app
Phishunt analysis Beta
40
high suspicion likely_phishingheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +5.1 Site cluster
- +4.5 Brand in title
- +4.1 Brand in screenshot
- +3.0 OpenPhish
- +3.0 TweetFeed
- +2.6 Brand in subdomain
- +1.9 ASN reputation
- +1.1 No CSP header
- +0.6 Long domain
- +0.6 Final host mismatch
- +0.6 Login text in screenshot
- +0.6 Suspicious TLD
- +0.5 Young certificate
- +0.3 Free CA
- +0.2 Hyphens
- +0.1 Deep subdomain
21 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Fake Xfinity webmail service page on a Vercel-lookalike app domain, with the brand in hostname and title. Flagged by OpenPhish and Google Safe Browsing and redirects to another host. Likely collects email credentials.
OpenPhishGoogle Safe BrowsingBrand in title
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-06 · confidence 80%
Domain & Network
Whois
Registrar
Name.com, Inc.
Network
Country
United States
United States
Hosting
Amazon.com, Inc.
ASN
AS16509
TLS Cert
YR2
GSB category: SOCIAL_ENGINEERING
CleanPhishTank · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Network / ASN
Amazon.com, Inc.
Submit to blocklists