clever-english-003746.framer.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of clever-english-003746.framer.app
This domain appears to be a page hosted on Framer, a website-building and content-hosting platform, rather than an official standalone corporate domain. The visible content presents itself as a French-language login page for Orange webmail, using Orange branding and text such as "Accéder au Mail d’Orange" and prompts for an email address or mobile number and password.
Based on the page title, meta description, and screenshot, the site appears to be designed to imitate an Orange account sign-in experience. The domain name itself does not match Orange’s official branding, and the page is served from a third-party Framer subdomain. That combination may indicate the page was created to collect account credentials rather than to provide a legitimate customer login service.
Safety Assessment for clever-english-003746.framer.app
The scan findings indicate elevated risk at the time of this scan. The domain was flagged by 18 out of 91 security engines, with many of those detections classifying the page as phishing or otherwise malicious. In addition, one major phishing database listed the URL, while a mail-reputation blocklist also listed the server IP; that DNS-based listing is a weaker signal for website content on its own, but it adds minor caution when viewed alongside the broader phishing detections.
The page content itself also raises concern. The screenshot shows a login form using Orange branding, while the actual domain is a Framer-hosted subdomain rather than an official Orange-owned login domain. This mismatch between the claimed identity and the hosting domain is commonly associated with credential-harvesting pages. Although the malware scan did not detect malicious files at the time of this scan, phishing pages often rely on simple web forms rather than downloadable malware.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate and is hosted on infrastructure associated with Framer B.V, with the server identified as Framer/841c613 and an IP address located in Amsterdam, Netherlands. The domain has existed for several years, but it is a subdomain under framer.app, which means the age of the parent domain does not necessarily reflect the age or legitimacy of the specific page content.
DNSSEC appears to be unsigned, and the scan data does not provide a confirmed TLS protocol version. No malicious files or flagged external links were identified by the page-level malware scan, but that does not materially reduce the phishing concern because the primary risk appears to come from deceptive page content and credential collection rather than exploit code.
Share your experience with this website. Was it safe? Did you encounter any issues?