prosperous-breakfast-387603[.]framer[.]app

The domain prosperous-breakfast-387603.framer.app is currently active and has been identified by multiple threat intelligence sources as a phishing vector. Registration data shows the domain was created through Framer B.V., and DNS resolution points to the IPv4 address 31.43.160.6. No nameserver information is available, which limits deeper DNS analysis. The domain is listed on two reputable blocklists, specifically PhishDestroy and OpenPhish, indicating that it has been observed delivering malicious or deceptive content.

VirusTotal scanning results reveal that 15 out of 91 security vendors have flagged the domain, reinforcing the suspicion of malicious intent. No additional evidence such as page titles, SSL certificate details, HTTP response codes, or trust‑score metrics has been disclosed, so the exact nature of the hosted content remains unverified. Consequently, defenders should treat the domain as high‑risk until further analysis confirms its payload.

Recommended mitigation steps include adding the domain and its resolved IP address (31.43.160.6) to DNS‑level deny lists, enforcing URL filtering rules to block any outbound connections, and monitoring network traffic for attempts to reach the address. Incorporating the domain into existing threat‑intel feeds and ensuring that endpoint protection solutions ingest the VirusTotal detection count will improve detection capability. Continuous observation of any changes to the domain’s registration, nameserver configuration, or hosting infrastructure is advised, as alterations may indicate a shift in attack tactics or an expansion of the phishing campaign.