suporthub[.]framer[.]website

Analysis indicates that the domain suporthub.framer.website was registered through the Framer registrar on 15 June 2026. The domain is delegated to Amazon Web Services name servers ns-1243.awsdns-27.org, ns-1818.awsdns-35.co.uk, and ns-336.awsdns-42.com, which is consistent with hosting on AWS infrastructure. DNS resolution points to the IPv4 address 31.43.161.6. Threat intelligence shows that the domain is currently listed on one public blocklist and has been actively blocked by the PhishDestroy filtering service.

VirusTotal scans have returned detections from 15 of 91 security vendors, indicating that multiple scanners have identified malicious behavior associated with the host. The available data classifies the activity as a generic phishing campaign, but no specific target brand, page title, or payload details have been published. Consequently, the exact phishing vector, credential‑stealing mechanism, and any associated command‑and‑control endpoints remain unknown. Defenders should add the domain and its IP address to deny‑list rules in firewalls, DNS filters, and email gateways.

Continuous monitoring of the IP reputation and periodic re‑scans with VirusTotal or other multi‑engine services are recommended to capture any changes in detection rates. Organizations using web‑filtering solutions should ensure the domain is included in existing blocklists and consider proactive blocking of the associated AWS name server range if broader mitigation is required. Incident response teams should treat any traffic originating from or directed to this host as malicious until further forensic analysis can confirm its intent.