comcasstt.framer.website
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of comcasstt.framer.website
This domain appears to host a webpage styled to resemble an Xfinity/Comcast sign-in portal. The page title is "Comcast," and the screenshot shows a login form asking for an email/username and password alongside Xfinity branding and links referencing Xfinity terms and privacy pages. The site is served from a Framer-hosted subdomain rather than an official Comcast or Xfinity domain.
Based on the visible content, the page appears intended to collect account credentials by imitating a telecommunications customer login experience. The domain string "comcasstt" closely resembles the Comcast brand name while being misspelled, which may indicate an attempt to look convincing to visitors who expect to reach an official Comcast or Xfinity login page.
Safety Assessment for comcasstt.framer.website
Multiple risk indicators were present at the time of this scan. The domain was flagged by 18 out of 91 security engines, with many of those detections classifying it as phishing or malicious. In addition, one threat database listing was present, and the domain's IP address was listed on one mail-reputation blocklist. While the malware file scan did not identify infected files, that result does not offset the stronger phishing-related signals from the broader reputation data.
The page content itself also raises concern. The site appears to mimic an Xfinity/Comcast login page, but it is hosted on a Framer subdomain rather than an official Comcast-owned domain. The domain name closely resembles the Comcast brand while using a misspelled variation, which may indicate a look-alike page designed to capture user credentials. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt certificate that was set to expire in July 2026. It appears to be hosted by Framer B.V. on IP address 31.43.160.6 in Amsterdam, using the web server identifier "Framer/89e8012." The domain uses AWS nameservers and its DNSSEC status was unsigned at the time of this scan.
From an infrastructure perspective, the use of HTTPS alone should not be treated as a trust signal, since phishing pages commonly use valid certificates as well. The combination of brand-like naming, third-party site-builder hosting, and phishing detections across multiple security engines is more significant than the presence of TLS.
Share your experience with this website. Was it safe? Did you encounter any issues?