soulful-patterns-028706[.]framer[.]app

The domain soulful-patterns-028706.framer.app was registered through Framer B.V., a service commonly used for rapid web‑app deployment. DNS resolution points to the single IPv4 address 31.43.160.6; no authoritative nameserver records were returned during lookup, indicating that the domain’s NS configuration is either hidden or misconfigured. VirusTotal has logged five positive detections out of ninety‑five scanned security vendors, confirming that multiple anti‑malware engines have identified malicious characteristics associated with the host. The domain is currently listed on one public security blocklist and has been actively blocked by the PhishDestroy feed, reinforcing the assessment of a phishing‑related threat. Its status remains “active” as of the report date, meaning the site continues to resolve and can be reached by potential victims. Analysis of the available infrastructure shows no further evidence of SSL/TLS usage, HTTP response codes, or page‑title metadata, as those fields were not supplied in the intelligence feed. Consequently, the precise content served by the site cannot be confirmed, and the specific phishing lure (e.g., credential harvesting for a particular brand) is undetermined. Nevertheless, the combination of registrar provenance, a single‑IP hosting footprint, multiple vendor detections, and inclusion on a dedicated anti‑phishing blocklist yields a high confidence rating for a phishing operation. Defenders should add 31.43.160.6 and the full hostname to network‑level deny lists, ensure DNS resolvers block the domain, and monitor outbound traffic for attempts to contact the host. Endpoint security solutions that incorporate the VirusTotal detection count should flag any connections as malicious. Continuous re‑evaluation is advised, as changes to the hosting environment or additional detections could modify the risk posture.