determined-message-247152[.]framer[.]app

This report details a malicious domain impersonating Microsoft for tech support scams. The site, titled "My Framer Site," poses as a legitimate Microsoft-branded page to deceive users into believing they are interacting with official support. The threat involves tricking victims into contacting fake support lines, leading to potential financial loss, credential theft, or unauthorized remote access to their systems.

Technical analysis confirms the threat. VirusTotal detected the site as malicious by 19 out of 95 security vendors, including ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, and Cluster25. It is listed on 1 blocklist. The domain was registered on 2026-02-21 through CSC Corporate Domains, Inc. and resolves to IP address 35.71.142.77, hosted by AS16509 Amazon.com, Inc. in the United States. The site uses a Let's Encrypt SSL certificate with serial E7.

The site is currently offline and inaccessible. Risk level is assessed as high due to the impersonation of a major brand and confirmed detection by multiple security vendors. Despite its current down status, the domain remains a potential threat if reactivated. Users should avoid any interaction with this domain.