ancient-selfies-799617[.]framer[.]app
“My Framer Site”
ancient-selfies-799617.framer.app — Konten tidak tersedia. Peniruan identitas merek: Yahoo. Ringkasan bukti: VirusTotal 17 detections (engine total unavailable) (alphaMountain.ai, BitDefender, Cluster25, CRDF, CyRadar); URLQuery 4 alerts; URLScan malicious verdict; PhishDestroy score 95/100. Registrar: Framer.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
This domain, ancient-selfies-799617.framer.app, is identified as a credential theft operation targeting users through deceptive login interfaces. Analysis indicates the site was designed to harvest account credentials by mimicking legitimate authentication portals, though no specific brand impersonation has been confirmed. The infrastructure lacks overt ties to known crypto drainer kits, suggesting a focus on traditional credential harvesting rather than blockchain-based fraud. Infrastructure analysis reveals the domain was registered on March 05, 2026, through Framer's platform, with a Let's Encrypt SSL certificate (serial E7) providing encryption. The site resolves to IP address 31.43.161.6, hosted on Amazon.com, Inc. infrastructure (AS16509) in the Netherlands. Security vendor detections on VirusTotal stand at 17/95, while the domain appears on one security blocklist. The page title, 'My Framer Site,' aligns with default Framer templates, indicating minimal effort to conceal malicious intent. The domain has been taken offline, reducing immediate risk to users. However, the infrastructure remains registered and could be repurposed for future campaigns. The elevated risk level stems from the domain's recent creation, security vendor detections, and association with credential theft. Users are advised to monitor accounts for unauthorized access and report any suspicious activity linked to this domain. Organizations should update blocklists to include this domain and its associated IP address to prevent potential reuse.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | ancient-selfies-799617.framer.app |
malicious | Sinkholed |
| Quad9 DNS | ancient-selfies-799617.framer.app |
malicious | Sinkholed |
| OpenDNS | ancient-selfies-799617.framer.app |
phishing | Phishing Block |
| DNS4EU | ancient-selfies-799617.framer.app |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
PD-20260305-5DE332 Recipient: abuse@framer.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive