shaw160[.]framer[.]website

The domain shaw160.framer.website is listed as a generic phishing site with an elevated risk rating as of July 29, 2026. Registration data show the domain was created through the Framer platform, indicating the use of a free‑hosting or website‑builder service to obscure the true operator. The domain is currently flagged by PhishDestroy, confirming that at least one dedicated anti‑phishing feed has taken it down or marked it as malicious. VirusTotal analysis shows that 16 out of 91 scanned security vendors have identified the domain as malicious, providing a moderate consensus of detection across independent scanners.

Additionally, the domain appears on a single external blocklist, which further corroborates its reputation as a threat vector. No public IP address, ASN, or hosting location has been disclosed in the available intelligence, and there are no reported SSL certificate details, HTTP status codes, or Safe Browsing verdicts beyond the blocklist entry. The page title and any specific brand impersonation have not been disclosed, so the precise phishing lure (e.g., credential harvesting for a particular service) remains uncertain.

Defenders should block traffic to shaw160.framer.website at the network perimeter and add the domain to endpoint and DNS filtering policies. Continuous monitoring of VirusTotal and other reputation services is advised, as additional detections may emerge. Organizations should also review user education content to cover phishing attempts that may originate from free‑hosting domains, given the observed use of Framer as a registration vector.