enlightened-types-913381[.]framer[.]app

The domain enlightened-types-913381.framer.app has been identified as a generic phishing site targeting users through brand impersonation of Framer. As of the latest assessment, the domain is offline, though it previously hosted content designed to deceive visitors into disclosing sensitive information or interacting with malicious payloads. The threat type aligns with phishing campaigns that exploit legitimate service names to lend credibility to fraudulent infrastructure. Analysis of technical indicators reveals the domain was flagged by 20 of 95 security vendors on VirusTotal, a notable detection rate suggesting active malicious intent. It was registered through CSC Corporate Domains, Inc. on February 21, 2026, and resolved to the IP address 31.43.161.6, hosted on infrastructure associated with Amazon.com, Inc. (AS16509) in the Netherlands. The domain appeared on one security blocklist, and its SSL certificate was issued by Let’s Encrypt (serial number E7). The page title, 'Site Not Found | Framer,' indicates an attempt to mimic the Framer platform, a common tactic in phishing operations to lower user suspicion. Current status confirms the domain has been taken offline, though the underlying infrastructure may remain accessible for future malicious activity. Users and organizations are advised to block the domain at the network level and monitor for related indicators of compromise, including the IP address and SSL certificate details. Security teams should review logs for connections to 31.43.161.6 and assess any interactions with the domain prior to its deactivation. Proactive measures include updating endpoint protection rules and educating users on recognizing brand impersonation tactics in phishing attempts.