easier-video-999892[.]framer[.]app

PhishDestroy identifies easier-video-999892.framer.app as an active crypto drainer scam designed to trick users into authorizing fraudulent cryptocurrency transactions. This domain mimics legitimate video platforms to harvest private keys, seed phrases, or wallet approvals under false pretenses, specifically exploiting trust in familiar service interfaces. The site leverages social engineering tactics—such as fake video previews or upload prompts—to induce users into connecting their wallets or entering sensitive credentials, resulting in immediate asset exfiltration or unauthorized blockchain interactions. This domain was flagged by PhishingArmy and detected by 19 out of 95 VirusTotal security vendors as malicious. It resolves to IP 31.43.160.6 and uses a Let’s Encrypt SSL certificate to appear legitimate. It has been observed on 1 security blocklist, indicating confirmed malicious activity. Technical indicators such as the use of a free subdomain on framer.app—a platform typically used for legitimate prototyping—combined with the presence of crypto-focused malicious intent, suggest this is a targeted campaign likely deployed against cryptocurrency users or developers. Users who visited easier-video-999892.framer.app should immediately disconnect any connected wallets, revoke any unauthorized smart contract approvals using tools like revoke.cash or Etherscan, and scan their devices for malware or browser extensions associated with the domain. Do not re-enter credentials or reconnect wallets. Report the domain to your antivirus provider and wallet platform if compromised. Consider rotating all private keys and passwords used on the affected device. Stay vigilant for follow-on phishing attempts.