giant-ways-340713[.]framer[.]app

Analysis conducted on August 01, 2026 indicates that the domain giant-ways-340713.framer.app is currently active and hosts a phishing infrastructure. The domain is registered through Framer B.V. and resolves to the IPv4 address 31.43.161.6. It appears on two reputable phishing blocklists, PhishDestroy and OpenPhish, confirming that defensive feeds have already flagged it for malicious use. VirusTotal reports that 17 of 91 security vendors have identified the domain as malicious, reinforcing the blocklist findings.

The domain’s authoritative name servers could not be retrieved (NS_NOT_FOUND), limiting the ability to assess DNS delegation details. No additional evidence such as SSL certificate data, HTTP response codes, or page title information is available at this time. The lack of publicly visible nameserver records prevents verification of potential fast‑flux or DNS‑based evasion techniques. No TLS certificate fingerprint or validity period has been observed, and attempts to retrieve HTTP headers returned no data, suggesting that the site may be intermittently reachable or deliberately limiting exposure.

While the exact phishing lure is not disclosed, the generic classification aligns with the observed blocklist activity. Given the convergence of blocklist listings and multiple vendor detections, the infrastructure should be considered high‑risk. Defenders are advised to block outbound connections to 31.43.161.6, add the domain to local deny lists, and monitor for related C2 patterns. Continuous re‑evaluation is recommended as further reconnaissance data may emerge.