xfinity-security-update.webflow.io
Category: Phishing And Fraud
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of xfinity-security-update.webflow.io
This URL appears to be a page hosted on the Webflow platform under the subdomain xfinity-security-update.webflow.io. Based on the domain string, page title, and screenshot, it presents itself as an "Xfinity security update" or Comcast-related sign-in page and asks visitors to enter a user ID and password.
The visible content is a very minimal login form with Xfinity branding cues and text referencing a Comcast update center. That combination suggests the page is intended to imitate a telecommunications account portal rather than serve as a standalone informational website. The underlying hosting arrangement indicates it is a user-created page on a third-party site builder rather than an official corporate domain for Xfinity or Comcast.
Safety Assessment for xfinity-security-update.webflow.io
Multiple security signals indicate elevated risk at the time of this scan. The URL was flagged by 12 out of 91 security engines, with detections centered on phishing, and one web-classification provider categorized it as phishing and fraud. The screenshot also shows a credential-entry form using Xfinity/Comcast branding on a webflow.io subdomain, which closely resembles a telecom account login and may be intended to collect account credentials from visitors.
Additional checks were mixed rather than fully clean. A malware scan did not identify malicious files in the small set of scanned resources, and major content-focused threat databases listed in the scan were largely clean at the time of review. However, the domain's IP address was listed on one mail-reputation blocklist, and another blacklist source returned a generic malicious-object listing. Those signals are weaker than the multi-engine phishing detections, but they add to the overall caution.
The published trust score for this page is very low, and the visible content aligns with that assessment. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The page is served over HTTPS with a valid TLS certificate issued by Google Trust Services, fronted by Cloudflare infrastructure, and hosted on IP address 104.18.36.248. The nameservers also point to Cloudflare, and the page loads static assets from Webflow and related content-delivery domains. DNSSEC appears to be unsigned at the time of this scan.
From a security-review perspective, the main concern is not the transport encryption but the site context: a branded login page hosted on a third-party subdomain rather than an official brand-owned domain. The domain itself is old at the platform level because it is part of webflow.io, so age alone is not a reassuring signal for this specific page.
Share your experience with this website. Was it safe? Did you encounter any issues?