nurtured-umbrella-322056.framer.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of nurtured-umbrella-322056.framer.app
This domain appears to be a page hosted on Framer, a website-building and hosting platform, rather than an official standalone corporate domain. The page title and visible content present a "Sign In to Get Started" login screen branded as Spectrum, with links referencing Spectrum account and policy pages. Based on the screenshot and metadata, the page is designed to resemble a customer sign-in portal for Charter Communications' Spectrum service.
The domain name itself, nurtured-umbrella-322056.framer.app, does not match Spectrum's known primary web domains and instead uses a generated subdomain under framer.app. That combination suggests this may be a custom page published through a third-party site builder while visually presenting itself as a telecom account login page. Based on available content, the site appears intended to collect user credentials or imitate a legitimate account-access workflow.
Safety Assessment for nurtured-umbrella-322056.framer.app
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 13 out of 91 security engines, with detections broadly classifying it as phishing or malicious. In addition, the page visually presents Spectrum branding while operating from an unrelated framer.app subdomain, which may indicate a look-alike login page rather than an official customer portal. The screenshot, page title, and outbound links to legitimate Spectrum properties further reinforce the possibility that the page is attempting to imitate a real sign-in experience.
Blacklist and threat-database results were mixed rather than uniformly clean at the time of this scan. Major content-malice databases shown here did not report the domain, and DNS-based blocklist checks were clean, but one blacklist source listed the domain and the malware scan also attached a generic malicious-object label to the page/domain despite no flagged files. Those generic heuristic labels are lower-confidence on their own, but in this case they are accompanied by substantial multi-engine phishing detections and strong visual impersonation cues.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted by Framer B.V on IP address 31.43.160.6 and served by a Framer web server, which is consistent with the visible "Made in Framer" badge in the screenshot. It uses a valid Let's Encrypt SSL certificate expiring in 2026-09-03, so the connection appears encrypted in transit; however, HTTPS alone does not verify that the page is operated by the brand it claims to represent.
The domain has existed for about five years, uses AWS nameservers, and its DNSSEC status is unsigned. While the age of the framer.app subdomain namespace may reduce the significance of domain age as a trust signal, the more important technical concern here is the mismatch between the hosted subdomain and the brand being presented on the page. That hosting/branding mismatch, combined with phishing detections, is a notable concern at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?