# sso-trust-com-x.framer.media — MALICIOUS

> sso-trust-com-x.framer.media: Spoofing single sign-on pages to steal credentials. 7/95 vendors flagged. Check the full report.

## Summary
PhishDestroy identifies sso-trust-com-x.framer.media as an active credential-harvesting domain masquerading as a legitimate SSO portal. This fraudulent site attempts to trick users into entering corporate login credentials by mimicking the appearance of a trusted single sign-on interface. The domain leverages HTTPS via a Let’s Encrypt certificate to appear legitimate, but its true intent is to capture and exfiltrate sensitive authentication data.

This domain was flagged by 7 of 95 VirusTotal security vendors and resolves to IP address 31.43.160.6. The domain is hosted on Framer’s media platform, which has been abused in multiple recent phishing campaigns targeting enterprise authentication systems. Users should avoid interacting with this domain entirely.

If you’ve visited sso-trust-com-x.framer.media, immediately change any passwords entered on that page and enable multi-factor authentication where available. Scan your device for malware using a trusted security tool, as credential phishing sites often drop info-stealing malware. Report the domain to your security team and implement network-level blocks against 31.43.160.6 to prevent further access.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 31.43.160.6

## Detection Status
- VirusTotal: 7 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/af5f3282-2d5e-4be3-81d5-7ece27e17a28
- PhishDestroy: https://phishdestroy.io/domain/sso-trust-com-x.framer.media/
- LLM endpoint: https://phishdestroy.io/domain/sso-trust-com-x.framer.media/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/sso-trust-com-x.framer.media/
Last updated: 2026-03-23