Sicherheitsbewertung
74 / 100
Die Sicherheitsbewertung kombiniert technische Prüfungen, Reputationssignale, Website-Historie, Scam-Informationen und KI-Analyse.
Signale hinter Ihrer Bewertung
Limited verification
Availability: limited_inspection · Website responded, but some page details could not be fully inspected during this scan. (HTTP 200)
Inspection: blocked · dns=true · tls=true · botProtection=true · parserFailure=false · contentLength=50343
Treffer aus Scam-Informationen
Serious matches from known phishing, malware, or public scam-warning sources. Provider names appear below each row.
In diesem Scan wurden keine bekannten Phishing-, Malware- oder Polizei-Warnungen gefunden.
Erkannte Risikomuster
Additional patterns worth a closer look before you pay or sign in—not proof on their own.
Keine zusätzlichen priorisierten Risikozeilen über kuratierte Listen-Treffer hinaus.
Hilfreiche Signale & Beobachtungen
Supporting checks in plain language. “Not found” means we did not see a report in that source during this scan.
No police list match found
No direct domain match was found on the public police trader-warning list checked in this scan.
Quelle: Dutch Police (public pages)Quellenzuverlässigkeit: low
Check unavailable
RDAP lookup overrun or error: RDAP provider timed out after 2500ms
Quelle: RDAPQuellenzuverlässigkeit: low
Kein bekannter Phishing-Bericht gefunden
Diese Website wurde in diesem Scan nicht in bekannten Phishing-Listen gefunden. Neue Betrugsseiten entstehen schnell—dies ist nur ein Signal.
Quelle: OpenPhishQuellenzuverlässigkeit: medium
URLhaus unavailable
HTTP 401
Quelle: URLhausQuellenzuverlässigkeit: low
HTTPS is available
HTTPS is available. This protects the connection, but does not verify that the site is legitimate. Issuer: DigiCert Inc. Expiry: 2026-12-31T23:59:59.000Z.
Quelle: TLS certificate checkQuellenzuverlässigkeit: high
Redirect chain detected
The entered website redirects before loading the final page. This appears to remain within the same registrable domain.
Quelle: Fraudly redirect analysisQuellenzuverlässigkeit: high
Domain & Registrierung
- Geprüfte URL/Hostname: xfinityrefunds.com
- Registrierte Domain: xfinityrefunds.com
- Registrierungsdatum: unbekannt
- Domain-Alter: Unavailable
- Registrar: unbekannt
- Land: unbekannt
- Ablaufdatum: unbekannt
- Datenschutz / anonymisierte Inhaberhinweise: nein / unbekannt
Quelle: RDAP (rdap.org)
Redirect analysis
- Original URL: https://xfinityrefunds.com/
- Final URL: https://www.xfinityrefunds.com/CardLogin
- Final domain: xfinityrefunds.com
- Redirect count: 2
- Crossed registrable domain: nein
- https://www.xfinityrefunds.com/
- https://www.xfinityrefunds.com/CardLogin
Sicherheitsprüfungen (HTTPS / Zertifikate)
- HTTPS/TLS reachable: ja
- Certificate trusted in probe: ja
- Possibly self-signed / untrusted: nein / unbekannt
- Issuer: DigiCert Inc
- Expiry: 2026-12-31T23:59:59.000Z
Quelle: TLS certificate check
Technical source details
Raw provider names (OpenPhish, URLhaus, Google Web Risk, RDAP, etc.) for this scan. “Matched” means that source reported something relevant.
No Police page string matchgovernmentno match
No direct domain string overlap was detected in lightly cached excerpts of the referenced politie.nl pages. Missing a hit is not proof a shop is trustworthy.
Quelle: Dutch Police (public pages) · severity: info · Zuverlässigkeit: low
Check unavailabledomainno match
RDAP lookup overrun or error: RDAP provider timed out after 2500ms
Quelle: RDAP · severity: info · Zuverlässigkeit: low
No OpenPhish match found in this snapshotphishingno match
No overlapping entry was found in the fetched OpenPhish feed for this check window. This does not prove the site is safe.
Quelle: OpenPhish · severity: info · Zuverlässigkeit: medium
URLhaus unavailablemalwareno match
HTTP 401
Quelle: URLhaus · severity: info · Zuverlässigkeit: low
HTTPS is availablesslno match
HTTPS is available. This protects the connection, but does not verify that the site is legitimate. Issuer: DigiCert Inc. Expiry: 2026-12-31T23:59:59.000Z.
Quelle: TLS certificate check · severity: info · Zuverlässigkeit: high
Redirect chain detecteddomainmatched
The entered website redirects before loading the final page. This appears to remain within the same registrable domain.
Quelle: Fraudly redirect analysis · severity: info · Zuverlässigkeit: high
Reputationsanreicherung
Optionaler breiterer Reputationsdurchlauf wenn verfügbar—über die schnellen Basisprobes hinaus.
Kein angereichertes Reputationsprofil. Das begrenzt den Kontext; es beweist keine Unsicherheit.
Schnelle Review-Sonden (Basisscan)
Leichte Verzeichnisprüfungen für das Modell—Ausfälle beschreiben unseren Snapshot, nicht die Seriosität des Shops.
Trustpilot · Unavailable
UnavailableTrustpilot
No public reviews found
Checked, no public reviews found
Google Reviews · Not confidently linked
Limited dataGoogle Reviews
We found possible review data, but could not confidently link it to this domain.
Not confidently linked
We found possible review data, but could not confidently link it to this domain.
- No reliable public review data found
No public review profile was found. This limits confidence but does not prove the site is unsafe.
- Public review data unavailable for this check.
Source availability (neutral)
- Third-party Trustpilot snapshot: snapshot unavailable in this crawl (limits confidence only).
Raw review snapshots
Trustpilot raw snapshot: not available in current payload.
Google reviews raw snapshot: not available in current payload.
Fulfillment-Signale
Dropshipping: unlikely · China-linked fulfillment: unlikely · Local stock/production: unlikely · Confidence: low · Score nudge: 0
- Marketplace terms detected: unlikely
- Third-party seller language detected: unlikely
- Cross-border shipping detected: unlikely
- Supplier fulfillment detected: unlikely
- Separate shipment language detected: unlikely
- International shipping detected: unlikely
- Fulfillment confidence: low · Fulfillment score nudge: 0
- Corpus: 3 segments / 6073 chars · version: fulfillment-v2-marketplace · matched: none
- No strong supply-chain signals detected in snippet.
Scoring-Details (erweitert)
Composite model uses raw impacts × confidence weights on the server. Positive numbers push the risk score up; negative numbers pull it down. Neutral rows are explanatory only — they must not be read as endorsement.
Applied trust-score cap after identity guardrails: 82/100 displayed trust.
"Trusted" was withheld because reputation or RDAP lifecycle evidence did not independently anchor identity for this snapshot.
Kombinierte Scoring-Signale (Bewertungen, Reputation, Feeds, Fulfillment…)
Vertrauenspositive Signale
- Contact information available (-3 raw · medium confidence) — A contact or reach-us section appears on the site.
- Business name presence (-3 raw · medium confidence) — References Xfinityrefunds.
- Privacy policy available (-2 raw · medium confidence) — Privacy policy available
- Valid HTTPS baseline (-3 raw · low confidence) — HTTPS and certificate checks looked healthy in this run. This is supportive context, not proof of legitimacy.
Website- und technische Beobachtungen
- No matched Google listing (+0 raw · high confidence) — No Google Places listing matched this domain; review impact is neutral (not a penalty).
Erkannte Risikomuster
- No business address in snippet (+5 raw · low confidence) — No obvious physical address in the captured text; for blogs, SaaS landing pages and portfolios that is often normal.
Unvollständige oder fehlende Daten
- Domain registration age unavailable (+0 raw · low confidence) — Domain registration age could not be verified during this scan. Some registries temporarily limit or omit registration data. This does not mean the website is suspicious, and it was not treated as a risk signal.
- Domain ownership could not be verified from public registration data (+1 raw · low confidence) — WHOIS/RDAP did not expose corroboratable registrant signals in this crawl. That is common and mainly reduces how confidently we can score—not evidence of impersonation by itself.
Gewichtung Scam-Informationen (Modell)
No weighted intel contributions in this run.
Hinweise Review-Sammler (neutral)
Buckets distinguish provider errors, source outages, review-derived signals, and (rare) website crawler transparency—never merged with fraud intel.
- trustpilot_public · source_unavailable: Third-party Trustpilot snapshot: snapshot unavailable in this crawl (limits confidence only).
Schlüsselfaktoren erklärt
Gemischte Hinweise aus Mustern, Scam-Scoring und optionaler KI—keine Rechts- oder Finanzberatung.
- No common bait keywords were found in the domain.
- Domain length looks normal.
- No strong supply-chain signals detected in snippet.
AI model used in this run: nein
