energized-darlings-390663[.]framer[.]app

The domain energized-darlings-390663.framer.app has been identified as a generic phishing site masquerading as a login page for MTS. The page title 'MTS| Mail Log in..' indicates an attempt to steal credentials from MTS email users. No specific drainer kit was identified, but the setup is consistent with credential harvesting.

Technical analysis reveals that 19 out of 95 security vendors on VirusTotal flagged this domain as malicious. It was registered on February 21, 2026, through CSC Corporate Domains, Inc., and resolves to IP address 35.71.142.77. The SSL certificate is issued by Let's Encrypt (E7), and the domain appears on one security blocklist. Google Safe Browsing status was not provided, but the blocklist listing supports the malicious classification.

As of the latest check, the domain has been taken offline. Response actions included flagging the domain and coordinating with hosting providers. However, users should remain vigilant, as similar domains may appear. PhishDestroy recommends that anyone who entered credentials on this page change their passwords immediately. Always verify URLs before logging in, and use official MTS portals for access.