cuddly-value-106815[.]framer[.]app

This domain is assessed as an elevated risk brand impersonation page targeting Microsoft services, specifically mimicking Outlook login flows. The primary threat involves credential theft, where users may be tricked into entering account login information that can be harvested by attackers. The infrastructure and presentation suggest a fake authentication portal designed to replicate legitimate Microsoft branding and email access interfaces.

Technical indicators show the domain was created on February 21, 2026 and is currently taken offline. VirusTotal analysis reports 19/95 security vendors flagging the domain as malicious. It appears on 1 security blocklist and is specifically blocked by PhishDestroy. The domain is registered through CSC Corporate Domains, Inc. It resolves to IP 52.223.52.2, hosted under AS16509 Amazon.com, Inc. infrastructure in the United States. The SSL certificate is issued by Let's Encrypt (E7). The page title observed is Outlook and the impersonated brand is Microsoft.

If a user interacted with this domain, immediate mitigation should include changing any credentials potentially entered on the page, especially Microsoft account passwords, and enabling multi-factor authentication if not already active. Sessions should be reviewed for unauthorized access and any suspicious login activity should be logged out across devices. Security scans should be performed on affected endpoints, and saved credentials in browsers should be cleared. Organizations should block the domain at DNS and web filtering layers and monitor for reuse of similar infrastructure patterns under the same hosting and certificate issuance profiles.