trustworthy-shallot-648391.framer.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.
Description of trustworthy-shallot-648391.framer.app
This domain appears to be a page hosted on Framer, a website-building platform, rather than a standalone branded domain. The page metadata is generic ("My Framer Site" / "Made with Framer"), which suggests it may be a quickly published landing page or prototype rather than an established official service site.
Based on the screenshot, the page presents itself as an Xfinity sign-in portal and includes fields for an email/mobile/username and password, alongside Xfinity-branded promotional content. Although the visible content imitates a telecommunications customer login experience, the site is operating from a Framer subdomain instead of an apparent official Xfinity-owned domain.
The combination of a generic hosted subdomain, telecom-themed branding, and a credential-entry form indicates the page may be intended to collect account login details while resembling a legitimate provider portal.
Safety Assessment for trustworthy-shallot-648391.framer.app
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 17 out of 91 security engines, and several web-classification providers categorized it as phishing or fraud-related. In addition, one threat database listing was present, and the screenshot shows a login page that appears to imitate Xfinity while being hosted on a Framer subdomain rather than an apparent official Xfinity web property.
The page asks visitors to enter account credentials, which is a common pattern in phishing campaigns when the hosting domain does not match the brand being presented. A malware scan also produced suspicious heuristic findings on the page and related hosted resources, although those heuristic detections are lower-confidence than the broader multi-engine phishing consensus. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served over HTTPS with a valid Let's Encrypt certificate that was valid at the time of this scan. It is hosted by Framer B.V on IP address 31.43.160.6, uses the web server identifier "Framer/0ccde4a," and relies on AWS nameservers. DNSSEC appears to be unsigned.
From an infrastructure perspective, the use of a reputable hosting platform and valid TLS does not by itself establish legitimacy, since hosted phishing pages can also use standard cloud infrastructure and encryption. The main technical concern here is not the certificate or hosting stack, but the mismatch between the presented Xfinity login branding and the unrelated Framer subdomain.
Share your experience with this website. Was it safe? Did you encounter any issues?