enlivened-words-791864[.]framer[.]app

This domain, enlivened-words-791864.framer.app, is identified as a credential harvesting phishing site targeting users through deceptive login interfaces. Analysis indicates the domain is currently offline, though it previously operated as an active threat. No specific brand impersonation has been confirmed, but the infrastructure aligns with common phishing tactics designed to extract sensitive credentials. Infrastructure analysis reveals the domain was registered through CSC Corporate Domains, Inc. on February 21, 2026, an unusual future date suggesting possible obfuscation or misconfiguration. It resolves to the IP address 35.71.142.77, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. The domain appears on one security blocklist and is flagged by 20 of 95 security vendors on VirusTotal, indicating elevated risk. The SSL certificate is issued by Let’s Encrypt (serial number E7), a common but non-exclusive indicator of legitimate or malicious domains alike. Current status confirms the domain has been taken offline, reducing immediate risk to users. However, the infrastructure remains a potential vector for future phishing campaigns. Recommendations include blocking the domain and associated IP (35.71.142.77) at the network level, monitoring for similar domains registered through the same registrar, and educating users on identifying credential harvesting attempts. Security teams should review logs for connections to this domain or IP to assess potential prior exposure.