xfinitymaill.framer.website
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of xfinitymaill.framer.website
This domain appears to host a login-themed page built on the Framer website platform. The page title is generic ("My Framer Site"), while the visible content and meta description reference Xfinity/Comcast branding and present a sign-in form asking for an email, mobile number, username, and password. Based on the screenshot, the page appears designed to resemble an account access portal rather than an informational or business homepage.
The domain name itself, xfinitymaill.framer.website, does not appear to be an official Xfinity or Comcast domain. Instead, it uses a third-party hosted subdomain on framer.website and includes a misspelled brand-like term ("maill"). That combination may indicate a brand-themed landing page created by an unknown operator rather than a verified customer portal operated by Comcast.
Safety Assessment for xfinitymaill.framer.website
Several security signals suggest elevated risk at the time of this scan. The domain was flagged by 8 out of 91 security engines, with multiple detections classifying it as phishing or malicious. In addition, one blacklist database listed the domain with a generic malicious-object label, although major content-focused threat databases in this scan were otherwise clean. The screenshot also shows a credential-entry page using Xfinity/Comcast branding on a Framer-hosted subdomain, which may indicate an attempt to collect account credentials while appearing associated with a well-known telecom provider.
The domain structure and page presentation add to the concern. The site appears to imitate a branded login experience, but it is hosted on a third-party site builder domain rather than an apparent official brand-owned domain. The generic page title, misspelled domain element, lack of ranking, and credential prompt are all patterns commonly associated with look-alike login pages. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site presented a valid Let's Encrypt SSL certificate that was set to expire in September 2026. It appears to be hosted by Framer B.V on IP address 31.43.161.6, using the web server identifier Framer/1a1b925, with infrastructure located in Amsterdam, Netherlands. The domain uses AWS nameservers and its DNSSEC status is unsigned.
From a technical scanning perspective, the malware crawl did not identify flagged files, flagged external links, or iframe-based threats at the time of analysis. However, the absence of malicious file detections does not offset the stronger phishing-related indicators from multiple security engines and the page's apparent credential-harvesting design.
Share your experience with this website. Was it safe? Did you encounter any issues?