aware-assistant-407030.framer.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of aware-assistant-407030.framer.app
This domain appears to be a page hosted on Framer, a website-building platform, rather than a standalone corporate domain. Based on the screenshot, the page presents a sign-in form branded as Xfinity and asks for an email, mobile number, username, and password. The page title and metadata remain generic ("My Framer Site" / "Made with Framer"), which suggests it may be a quickly published landing page rather than an official customer portal.
The visible content appears to imitate a telecommunications login experience, with Xfinity branding, account-access prompts, and promotional mobile-service messaging. Although the underlying host is a Framer subdomain operated through Framer's infrastructure, the page itself does not appear to be an official Xfinity or Comcast web property based on the domain name shown.
Safety Assessment for aware-assistant-407030.framer.app
Multiple independent security signals indicate elevated risk at the time of this scan. The domain was flagged by 16 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. In addition, one threat database listing was present, and the screenshot shows a credential-entry page using Xfinity branding on an unrelated Framer subdomain, which may indicate an attempt to collect account credentials by imitating a known telecommunications provider.
The malware scan did not report confirmed malicious files, but it did include a generic suspicious-object heuristic tied to the page itself. That signal is lower confidence on its own, yet here it is accompanied by substantial multi-engine phishing detections and page content that appears inconsistent with the hosting domain. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal than phishing detections but still adds minor caution.
Based on these findings, this website may pose potential risks to visitors, particularly if asked to enter login credentials or personal account information.
Technical Description
The site is served over HTTPS with a valid Let's Encrypt certificate that was valid at the time of scanning. It resolves to IP address 31.43.161.6, uses the web server banner "Framer/841c613," and appears to be hosted by Framer B.V in Amsterdam, Netherlands. The domain is about five years old, uses AWS nameservers, and DNSSEC appears to be unsigned.
From an infrastructure perspective, the use of TLS is a positive baseline control, but HTTPS alone does not verify legitimacy. A notable concern is the mismatch between the Framer subdomain, the generic Framer metadata, and the Xfinity-branded login content shown in the screenshot. That combination may be consistent with a hosted phishing page rather than an official telecom login portal.
Share your experience with this website. Was it safe? Did you encounter any issues?