fabulous-decisions-465242.framer.app
“My Framer Site”
Evidence Summary
This domain, fabulous-decisions-465242.framer.app, is confirmed to operate as a credential theft site designed to harvest user login details through deceptive interfaces. Analysis indicates the site impersonates trusted platforms, tricking visitors into entering sensitive information such as usernames, passwords, or authentication tokens. The threat targets individuals unaware of the site's malicious intent, often through misleading links or social engineering tactics. Infrastructure analysis reveals multiple indicators of compromise. The domain resolves to IP address 31.43.160.6, hosted on Amazon Web Services infrastructure (AS16509) in the Netherlands. It is registered through Framer, a legitimate website builder, but exhibits suspicious characteristics such as a generic page title (My Framer Site) and a Let's Encrypt SSL certificate (YE1). Security vendors on VirusTotal flagged the domain as malicious, with 22 out of 95 engines detecting it as a threat. Additionally, the domain appears on one security blocklist and was proactively blocked by automated threat detection systems. If you visited fabulous-decisions-465242.framer.app, immediate action is required to mitigate risks. First, disconnect the device from the internet to prevent potential data exfiltration. Run a full scan using updated security software to detect and remove any malware. Change passwords for all accounts accessed from the compromised device, prioritizing email, financial, and work-related services. Enable multi-factor authentication where available. Monitor accounts for unauthorized activity and report any suspicious transactions to the relevant service providers. If sensitive data was entered, consider notifying cybersecurity authorities or identity protection services for further guidance.
Network Security Intelligence
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | fabulous-decisions-465242.framer.app |
malicious | Sinkholed |
| Cloudflare DNS | fabulous-decisions-465242.framer.app |
malicious | Sinkholed |
| OpenDNS | fabulous-decisions-465242.framer.app |
phishing | Phishing Block |
| Quad9 DNS | fabulous-decisions-465242.framer.app |
malicious | Sinkholed |
Detection timeline
-
Google Safe Browsing
0 → 1
-
Cloudflare Radar
Cloudflare Radar scan stored · Open scan
Threat Response Pipeline
Public Blocklist Status
Submitted Evidence Snapshot
- Sent
- Ledger records
- 1
- Case ID
PD-20260611-0AB468- Captured page title
- My Framer Site
Blocklist coverage
11 monitored external feeds · stored snapshot Sep 10, 2026
Technologies · 4 identified
Framer is a no-code web design platform for designing and publishing responsive websites.
www.framer.com 100% confidenceReact is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org 100% confidenceHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% confidenceHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% confidenceVirusTotal Analysis
Technologies
4 high-confidence technologies identified
Evidence & External Reports
PD-20260611-0AB468 Recipient: abuse@framer.com Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive