xfinity-security-update.webflow.io favicon

xfinity-security-update.webflow.io

Category: Phishing And Fraud

Scanned: Sep 29, 2026, 07:15 UTC · First seen: Sep 29, 2026 · Threat Engines: 12 / 91 · Times Scanned: 1
5 / 100 Trust Score Based on scan findings at the time of analysis
Potentially Dangerous
0 - High Risk50 - Moderate100 - No Threats
Fresh scan recommended
Last scanned 21 days ago - security status may have changed since then.
Not scanned has not been scanned yet. Hit Check website to check it.
Failed
xfinity-security-update.webflow.io Phishing And Fraud · flagged by 12/91 engines
What to do now
  1. Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
  2. Already visited? Check your device. A free scan shows whether anything was installed.
  3. Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.

Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).

Screenshot of xfinity-security-update.webflow.io Captured Sep 29, 2026
https://xfinity-security-update.webflow.io
Screenshot of xfinity-security-update.webflow.io
This website has been flagged as potentially harmful
Screenshot blurred for safety. Multiple security engines flagged potential threats at the time of scanning.
13 years (webflow.io)
Not Ranked - This website does not appear in the Tranco top list
Flagged by 12 of 91 engines
✓ Valid (TLS)
Cloudflare, Inc.
Toronto, Canada
cloudflare
Webflow
104.18.36.248
Get PCrisk security checks in your Google results Add PCrisk as a preferred source and our scan reports and malware guides are prioritised for you in Google.
Add PCrisk as preferred source
Domain & WHOIS Information
Registrar MarkMonitor, Inc.
Registered May 8, 2013 (webflow.io)
Expires May 8, 2028
Name Servers journey.ns.cloudflare.com
DNSSEC Unsigned
Hosting Cloudflare, Inc.
This site is hosted on webflow.io - a free hosting platform. The WHOIS data above belongs to the platform, not to xfinity-security-update.webflow.io. The actual creation date of this subdomain is unknown and could be as recent as today.
Reputation & Threat Check 91 security engines checked
File Scan Summary Powered by Quttera Engine
5 files scanned
No threats
5
Low Risk
0
Medium Risk
0
High Risk
0
No threats Low Risk Medium Risk High Risk
xfinity-security-update.webflow.io/# 2.6 KB No threats
webflow.com/site/third-party-cookie-check.html 674 B No threats
d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=675203253927f85a6bafa5f1 87.4 KB No threats
cdn.prod.website-files.com/675203253927f85a6bafa5f1/js/webflow.32d940724.js 45.2 KB No threats
challenges.cloudflare.com/turnstile/v0/api.js 84.7 KB No threats
External Links & Domains
9
External Links
All Clean
0
Iframes
Clean
4
Referenced Domains
All Clean
0
Flagged Resources
None Detected
cdn.prod.website-files.com Not flagged
cdn.prod.website-files.com/675203253927f85a6bafa5f1/6752047166934e1e575e19f7_xfinity%20another%20logo.png Not flagged
cdn.prod.website-files.com/675203253927f85a6bafa5f1/css/xfinity-security-update.webflow.1eb9c6c1d.css Not flagged
cdn.prod.website-files.com/675203253927f85a6bafa5f1/js/webflow.32d940724.js Not flagged
cdn.prod.website-files.com/img/favicon.ico Not flagged
cdn.prod.website-files.com/img/webclip.png Not flagged
challenges.cloudflare.com/turnstile/v0/api.js Not flagged
d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site%3D675203253927f85a6bafa5f1 Not flagged
webflow.com/site/third-party-cookie-check.html Not flagged
cdn.prod.website-files.com Not flagged
challenges.cloudflare.com Not flagged
d3e54v103j8qbb.cloudfront.net Not flagged
webflow.com Not flagged
xfinity-security-update.webflow.io Overview

Description of xfinity-security-update.webflow.io

This URL appears to be a page hosted on the Webflow platform under the subdomain xfinity-security-update.webflow.io. Based on the domain string, page title, and screenshot, it presents itself as an "Xfinity security update" or Comcast-related sign-in page and asks visitors to enter a user ID and password.

The visible content is a very minimal login form with Xfinity branding cues and text referencing a Comcast update center. That combination suggests the page is intended to imitate a telecommunications account portal rather than serve as a standalone informational website. The underlying hosting arrangement indicates it is a user-created page on a third-party site builder rather than an official corporate domain for Xfinity or Comcast.

Safety Assessment for xfinity-security-update.webflow.io

Multiple security signals indicate elevated risk at the time of this scan. The URL was flagged by 12 out of 91 security engines, with detections centered on phishing, and one web-classification provider categorized it as phishing and fraud. The screenshot also shows a credential-entry form using Xfinity/Comcast branding on a webflow.io subdomain, which closely resembles a telecom account login and may be intended to collect account credentials from visitors.

Additional checks were mixed rather than fully clean. A malware scan did not identify malicious files in the small set of scanned resources, and major content-focused threat databases listed in the scan were largely clean at the time of review. However, the domain's IP address was listed on one mail-reputation blocklist, and another blacklist source returned a generic malicious-object listing. Those signals are weaker than the multi-engine phishing detections, but they add to the overall caution.

The published trust score for this page is very low, and the visible content aligns with that assessment. Based on these findings, this website may pose potential risks to visitors.

Technical Description

The page is served over HTTPS with a valid TLS certificate issued by Google Trust Services, fronted by Cloudflare infrastructure, and hosted on IP address 104.18.36.248. The nameservers also point to Cloudflare, and the page loads static assets from Webflow and related content-delivery domains. DNSSEC appears to be unsigned at the time of this scan.

From a security-review perspective, the main concern is not the transport encryption but the site context: a branded login page hosted on a third-party subdomain rather than an official brand-owned domain. The domain itself is old at the platform level because it is part of webflow.io, so age alone is not a reassuring signal for this specific page.

HTTP Redirect Chain
No redirects detected - direct connection to destination
Website Insights
Not Ranked
Tranco Rank
Not in Top 1M
Visitors Unknown
Category: Phishing And Fraud
Rank History (30 days)
No rank data available
No cookies data available
Dispute This Score For website owners
Believe this score is inaccurate?
If you are the website owner and believe the scan results contain errors or false positives, you can submit a dispute for manual review. Our team typically responds within 1-2 business days.
You will be asked to verify your email before the dispute can be processed.
By submitting this form, you confirm that the information provided is accurate. Disputes are reviewed manually and results may take up to 48 hours to update.
One more step…
To submit your dispute for xfinity-security-update.webflow.io, please click the verification link we just emailed you. Once verified, we'll review it within 1-2 business days.
This report was generated automatically and is provided for informational purposes only. Results are based on a point-in-time scan and may contain false positives or incomplete data. This does not constitute a security audit or certification. No vendor in the market can guarantee a 100% detection rate. If you believe this report is inaccurate, please submit a dispute.

Share your experience with this website. Was it safe? Did you encounter any issues?