calm-perspective-580819[.]framer[.]app

Analysis of calm-perspective-580819.framer.app as of July 26 2026 shows that the domain is currently active and resolves to the IPv4 address 31.43.160.6. The domain was registered through Framer B.V., a service known for providing web‑hosting and design platforms, and the registrar information is publicly available. VirusTotal reports that ten out of ninety‑one scanning engines have flagged the domain, indicating that a subset of security vendors have identified malicious characteristics.

In addition, the domain appears on a single external security blocklist and is actively blocked by the PhishDestroy feed, reinforcing the suspicion that it is being used for abusive purposes. The domain’s authoritative name server data could not be retrieved (NS_NOT_FOUND), which limits the ability to assess DNS‑level controls such as TTL values or secondary name‑server redundancy. No publicly available page title, SSL certificate details, or HTTP response codes have been recorded, so the surface‑web content and transport‑layer security posture remain unknown.

Consequently, while the available infrastructure signals a high‑risk profile—especially the combination of multiple vendor detections and blocklist inclusion—analysts cannot confirm the exact phishing campaign or the targeted brand without further content inspection. Defenders should block or sinkhole the domain at the network perimeter, monitor DNS queries for the 31.43.160.6 address, and incorporate the domain into endpoint and email security policies. Continuous re‑evaluation is recommended in case additional intelligence, such as page‑level indicators or victim reports, becomes available.