⚠️
Ce domaine a été signalé comme malveillant
Detected by 4 security vendors. Exercise extreme caution — do not enter credentials or personal information. Create a complaint draft from this stored evidence, review it, and submit it yourself to the appropriate authority.
Domain security & threat intelligence

frameworker[.]cc

Analyse phishing et sécurité de frameworker.cc

“YouTube”

Threat verdict High 67/100 stored risk score
Availability Content unavailable Content was unavailable in the latest observation
Risk signals
VirusTotal: 4/95 detections Brand impersonation: Google
4/95 VT Sep 03, 2025 Unavailable since Mar 16, 2026 Google Tech Support Scam 194d to unavailable CDN + more
Résumé du rapport

frameworker.cc : 4 moteurs VirusTotal sur 95 ont signalé ce domaine. Consultez le DNS, le SSL, le bureau d’enregistrement et les listes de blocage.

L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.

Evidence Summary
HIGH
Ref
496BF018
Score
67/100
Mode
Evidence v1

PhishDestroy first recorded frameworker.cc on Sep 3, 2025. This English evidence brief is rebuilt from the current structured observations stored for the report. The current stored risk score is 67/100.

The latest stored availability state is “Content unavailable” on Aug 1, 2026 at 03:11 UTC. This is a reachability snapshot, not proof of the cause of any outage, restriction, or status change.

VirusTotal returned 4 detections from 95 scanners in the stored check on Feb 23, 2026 at 06:29 UTC. The independent blocklist snapshot recorded 0 matches across 10 configured external sources on Aug 2, 2026 at 00:20 UTC. PhishDestroy's own listing is excluded from that count. A zero-match snapshot is not a safety verdict.

Other stored evidence. Google Safe Browsing stored no positive flag on Mar 2, 2026 at 21:37 UTC. This time-bound result is not evidence of safety. AlienVault OTX stored 0 pulse references on Mar 2, 2026 at 00:43 UTC. OTX pulses are community-intelligence references, not vendor verdicts. The Spamhaus DBL snapshot stored no positive result on Jul 15, 2026 at 00:34 UTC. That result is not evidence of safety. A URLScan capture is stored from Mar 5, 2026 at 23:27 UTC.

Stored context lists registrar NameCheap, Inc., IP address 142.250.74.206, registration date Feb 22, 2025, apparent target Google. Except for the registration date, these fields do not share a source timestamp in this report and may change.

Treat these as stored, time-bound observations rather than a live safety guarantee. Source verdicts and reachability can change, and zero or missing vendor matches never prove that a domain is safe. Avoid interacting with the domain while uncertainty remains, and use the appeal process if this report is inaccurate.

VirusTotal
VirusTotal
4 det.
URLScan
URLScan
Gridinsoft
0/100
TLS certificate
R13
Âge
1.4 yr
Observed status
Content unavailable
PhishDestroy
DestroyList
Listed
Couverture des données VirusTotal 4 / 95 URLQuery not checked OTX no pulses CF Radar clean URLScan capture stored report URLScan verdict checked — no malicious verdict Blocs DNS 14 checked — no blocks TLS valid certificate, 84d WHOIS 18 mo old Screenshot external capture Chaîne de redirection not probed Gridinsoft 0/100

Processus de réponse aux menaces Pipeline

Discovery
Checks
Reports
Availability
15/16
Découverte et ingestion préventives
Menace détectée
1/1 ✓
Menace détectée
frameworker.cc détectés et mis en file d'attente en vue d'une analyse complète
Sep 03, 2025
Threat Intelligence Checks
URLScan.io Capture · URLScan Verdict · Cloudflare Radar · Web Archive · VirusTotal · Google Safe Browsing · Brand Impersonation · Forensic Evidence Collected · Technical Analysis Recorded · VT Detection -1 · VT Detection -2
11/11 ✓
URLScan.io Capture
Stored URLScan report with capture artifacts
Mar 05, 2026
URLScan Verdict
URLScan returned no malicious verdict; this provider result is not a safe-domain determination · score 0
Jul 29, 2026
Cloudflare Radar
Scanned via Cloudflare Radar — DNS, certificates & network data
Web Archive
Preserved in Wayback Machine — historical evidence archived
VirusTotal
4 / 95 vendors flagged on VirusTotal
Feb 23, 2026
Google Safe Browsing
Mar 02, 2026
Brand Impersonation
Impersonation of Google
Forensic Evidence Collected
Stored evidence from URLScan.io, stored screenshot
Mar 05, 2026
Technical Analysis Recorded
The report contains stored technology or forensic-analysis results
Aug 02, 2026
VT Detection -1
1 detection removed (4 → 3)
Mar 10, 2026
VT Detection -2
2 detections removed (4 → 2)
Feb 27, 2026
Notification Records
Complaint Draft Available
PENDING
Complaint Draft Available
No submission is recorded. You can create a draft, review it, and submit it yourself to the appropriate authority.
Publication et disponibilité
DestroyList Published · Content Observed Unavailable · Time to First Unavailability
3/3 ✓
DestroyList publié
Sep 03, 2025
Content Observed Unavailable
The latest stored checks indicate that the reported content is unavailable; this does not establish who or what caused the change
Mar 16, 2026
Time to First Unavailability
4656 hours elapsed from detection to the first unavailable observation

Statut de la liste de blocage publique

Collecte des preuves

Stored Capture
2025-09-03 17:16 UTC
Malicious · 4/95 engines
Forensic screenshot of frameworker.cc showing the phishing page layout
IP: 142.250.74.206
NameCheap, Inc.
525d old
R13

Informations sur les domaines

Domainframeworker.cc
URLScan Verdict No malicious verdict recorded score 0 report ↗
Server / ASN cloudflare · AS15169 GOOGLE, US
IP Reputation abuse score 0/100 0 reports checked Jun 19, 2026
Registrar NameCheap US(US)
IP Address 142.250.74.206 CDN
GeoUS Mountain View, US
NetworkASAS15169 · AS15169 Google LLC
Origin IP is hidden behind a CDN proxy. Reverse-IP on the edge IP returns unrelated tenants — origin discovery requires passive-DNS or CT cross-reference.
RegistrationCréé Feb 22, 2025 Expires Feb 22, 2026
Time to First Unavailability 194 days
What we count Elapsed time from the first stored abuse report to the first observation that frameworker.cc was unavailable. This does not establish the cause.
What each report contains Stored outgoing report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
Détails techniquesDNS, SAN SSL, horodatages
Première détectionSep 03, 2025
Nameserversalec.ns.cloudflare.comgloria.ns.cloudflare.com
TLS Fingerprintfa3b2fd7b8026de739ca217cd0f05c249bb1ee6b…
Page Title
YouTube
Impersonates
Google Youtube
TLS Certificate
Valid transport encryption · Issued by R13 · valid for 84 days
Technologies · 2 identified
Nginx
Web servers Reverse proxies

High-performance HTTP server and reverse proxy, known for stability and low resource usage.

OpenResty
Web servers

Web platform based on Nginx with LuaJIT for scalable web apps.

Detected via Cloudflare Radar · Wappalyzer engine
Signaler ce domaine Envoyez des éléments de preuve et contribuez à protéger les autres

Analyse VirusTotal

4 / 95 security vendors flagged this domain
View on VT
alphaMountain.ai
CyRadar
Forcepoint ThreatSeeker
Fortinet

Preuves archivées

Wayback Machine Snapshot
A historical snapshot is available for evidence review
View Archive
Analyse des performances du site

Google PageSpeed Insights — mobile performance audit of frameworker.cc · checked Mar 2, 2026

96
Good
Performance
FCP
1.14s
First Contentful Paint
LCP
2.68s
Largest Contentful Paint
CLS
0.003
Cumulative Layout Shift
TBT
0ms
Total Blocking Time
SI
1.31s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Données factuelles et rapports externes Open external tools
Référencement naturel et nom de domaine

Ce site vous a-t-il affecté ?

Vous n'êtes pas seul(e) et il n'y a pas de quoi avoir honte. Les escrocs sont des criminels rusés qui abusent de la confiance des gens. Signaler ce que vous avez subi est l'arme la plus efficace contre la fraude : votre signalement peut empêcher d'autres personnes d'en être victimes et aider les forces de l'ordre à intervenir. Le silence est le plus grand atout de l'escroc. Casse-le.

If you entered account credentials, personal or payment information, or downloaded a file from this domain, take immediate action. Below are resources to help you report the incident and protect yourself.

Méfiez-vous des escrocs qui prétendent vous aider à récupérer vos biens ! Criminals may contact victims again while pretending to be investigators, lawyers, or recovery agents. Do not pay upfront fees or share credentials. En savoir plus sur la fraude liée aux aides à la reprise →

Signalez-le à vos autorités locales

Sélectionnez votre pays pour obtenir interlocuteurs officiels en matière de cybercriminalité, or create a complaint draft →

Sélectionnez votre pays...
Plus de 180 pays
Zero-PII — vos données ne quittent jamais le navigateur Review and submit it yourself

About This Report: frameworker.cc

This report presents the latest stored evidence available to PhishDestroy. Source timestamps are shown where available; availability and vendor verdicts can change after collection.

The site displays a page titled “YouTube”, which may be designed to impersonate Google.

frameworker.cc has been flagged by 4 security vendors as of August 1, 2026.

Si vous estimez que cette annonce est inexacte, vous pouvez introduire un recours. Pour plus d'informations sur notre méthodologie, rendez-vous sur notre Page FAQ.

Vérifier n'importe quel domaine

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Scanner maintenant

Signaler une tentative d'hameçonnage

Signalez les domaines suspects à notre base de données des menaces — protégez la communauté

Report

Flux d'alertes en temps réel

Recent phishing reports and observed availability changes

Monitor

Restez informés, restez en sécurité

Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif

Flux d'alertes en temps réel Contester cette annonce
HTML · IFRAME

Intégrer ce rapport

Partagez ces informations sur les menaces sur votre site web ou votre blog

embed.html
<iframe
  src="https://phishdestroy.io/fr/embed/domain/frameworker.cc"
  title="PhishDestroy threat report for frameworker.cc"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>