bewildered-fruit-952216.framer.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of bewildered-fruit-952216.framer.app
This domain appears to host a web page built on Framer, a hosted website publishing platform. The page title and visible content present a "Sign In to Get Started" login screen styled to resemble Spectrum, with links referencing Spectrum account creation, password recovery, and policy pages. Based on the screenshot and metadata, the page is designed to collect user credentials rather than provide independent editorial or business content.
The domain itself is a Framer subdomain rather than an official Spectrum-owned domain. While Framer is a legitimate hosting platform, pages published on shared site builders can be created by third parties. In this case, the branding and layout suggest the page may be attempting to imitate Spectrum's customer login experience rather than operating as an official Charter Communications property.
Safety Assessment for bewildered-fruit-952216.framer.app
Several security signals indicate elevated risk at the time of this scan. The domain was flagged by 11 out of 91 security engines, with multiple detections classifying it as phishing or malicious. The screenshot also shows a login page using Spectrum branding on a Framer subdomain, which does not appear to match Spectrum's official web domain structure and may be a look-alike intended to capture account credentials.
Blacklist and reputation data were mixed but still concerning. Major content-malice databases shown here did not detect threats at the time of this scan, but the domain's IP address is listed on one mail-reputation blocklist, and one additional blacklist source also returned a malicious-style generic listing. Although the malware file scan did not identify infected files, phishing pages often rely on deceptive page design rather than downloadable malware.
Taken together, the combination of multi-engine phishing detections, brand-style login impersonation, and the mismatch between the displayed brand and hosted domain suggests this website may pose potential risks to visitors.
Technical Description
The site is served over HTTPS with a valid Let's Encrypt certificate that was current at the time of scanning. It appears to be hosted by Framer B.V on IP address 31.43.160.6, using a Framer web server and AWS nameservers. The domain is about five years old, which reflects the age of the Framer subdomain registration rather than necessarily the age or legitimacy of the specific page content.
DNSSEC is unsigned, which is common but means DNS responses do not benefit from DNSSEC validation. No malicious files were flagged in the limited file scan, but that does not materially reduce phishing concerns here because credential-harvesting pages can be technically simple and still harmful. The main technical concern is the apparent use of third-party hosted infrastructure to present branding associated with a different organization.
Share your experience with this website. Was it safe? Did you encounter any issues?