noble-yak-959506[.]framer[.]app

Analysis indicates that the domain noble-yak-959506.framer.app is actively flagged as a high-risk phishing site. As of July 27, 2026, the domain resolves to the IP address 31.43.160.6 and is hosted through Framer B.V., a legitimate platform often exploited for phishing campaigns due to its ease of deployment. Infrastructure analysis reveals the domain lacks configured nameservers, a common red flag in fraudulent setups, as legitimate sites typically maintain proper DNS records.

The domain appears on at least one security blocklist, specifically PhishDestroy, which categorizes it as malicious. Additionally, 10 out of 91 security vendors on VirusTotal have detected the domain as suspicious, reinforcing its classification as a phishing threat. No brand or specific scam type has been confirmed in available data, and the exact content of the site remains unanalyzed.

Defenders should treat this domain as active and high-risk, blocking access at the network level and monitoring for related indicators. The absence of nameservers and the use of a Framer subdomain suggest rapid deployment, a tactic often employed in short-lived phishing operations. Organizations are advised to correlate this domain with other Framer-hosted subdomains exhibiting similar patterns, as threat actors frequently rotate such infrastructure to evade detection.