encouraging-selfie-733175.framer.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of encouraging-selfie-733175.framer.app
This domain appears to be a page hosted on Framer, a website-building and hosting platform, rather than a standalone corporate domain. The page metadata is generic ("My Framer Site" / "Made with Framer"), while the visible content in the screenshot presents a sign-in page branded as Xfinity, including fields for an email/username and password and promotional text about mobile billing.
Based on the screenshot and scan context, the page appears to imitate a telecommunications customer login experience rather than serving as an official Framer landing page. The underlying hosting appears to be operated by Framer B.V., but the content itself does not appear to belong to Framer; instead, it appears to be user-published content on that platform. The mismatch between the hosted subdomain name and the Xfinity branding is a notable contextual signal.
Safety Assessment for encouraging-selfie-733175.framer.app
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 11 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. In addition, a major threat database listed the page for social-engineering activity. The screenshot also shows a credential-entry form branded as Xfinity on an unrelated framer.app subdomain, which may indicate an attempt to collect login details by imitating a known telecom provider.
There is one weaker secondary signal as well: the domain's IP address is listed on one mail-reputation blocklist. On its own, that type of listing would not be strong evidence about website content, but in this case it appears alongside broader phishing-related detections. Although the malware file scan reported no flagged files, that does not offset the stronger phishing indicators and the visible login-page impersonation pattern.
Based on these findings, this website may pose potential risks to visitors, especially anyone asked to enter account credentials.
Technical Description
The site uses a valid Let's Encrypt SSL certificate that was current at the time of scanning, and it is served by a Framer web server hosted by Framer B.V. from an IP located in Amsterdam, Netherlands. The domain is part of the framer.app hosting ecosystem and resolves through AWS nameservers. DNSSEC appears to be unsigned.
From a technical standpoint, the presence of HTTPS only indicates encrypted transport and should not be taken as proof of legitimacy. The main concern here is not TLS configuration but the apparent use of a hosted page builder subdomain to present a branded login form that does not match the hosting domain.
Share your experience with this website. Was it safe? Did you encounter any issues?