abundant-reassurance-299202[.]framer[.]app

PhishDestroy identifies abundant-reassurance-299202.framer.app as an active credential-harvesting phishing domain designed to trick users into surrendering usernames and passwords. The page impersonates a legitimate service through convincing branding, lure content, and a Let’s Encrypt SSL certificate that displays a green padlock to lower victim vigilance. Once credentials are entered, they are immediately exfiltrated to attacker-controlled servers, enabling account takeovers across banking, email, and social platforms.

This domain was flagged by 24 out of 95 VirusTotal security vendors and blocked by three authoritative lists: OpenPhish, PhishingArmy, and OISD. It resolves to IP 31.43.160.6 via a Framer.app subdomain created to evade traditional domain reputation checks. The combination of high blocklist coverage, low defender coverage, and freshly minted infrastructure elevates the risk profile to high, indicating an ongoing operation rather than a transient campaign.

If you visited abundant-reassurance-299202.framer.app, immediately change passwords on any account where you may have reused credentials and enable multi-factor authentication. Review recent login history for anomalies and revoke any suspicious sessions. Report the URL to your organization’s security team or submit it to PhishDestroy via our public feed for takedown analysis. Avoid re-visiting the domain to prevent secondary payloads such as malware or further credential prompts.