innovative-pyramid-715701[.]framer[.]app

This domain, innovative-pyramid-715701.framer.app, poses a specific threat as a fake login page designed to impersonate WeTransfer, a legitimate file sharing service. The site likely attempts to trick users into entering their WeTransfer credentials, leading to potential unauthorized access and data theft. Users who visit such sites risk having their login information stolen and used for malicious purposes, compromising their accounts and potentially spreading the threat further.

Analysis indicates that 22 out of 95 security vendors on VirusTotal flag this domain as malicious, suggesting a significant level of suspicion among the cybersecurity community. The domain is registered through Framer, a platform typically used for prototyping and design, which is an unusual choice for a legitimate service. The IP address 31.43.161.6, associated with AS16509 Amazon.com, Inc., is located in the Netherlands. The domain also appears on one security blocklist and is blocked by PhishDestroy, further confirming its suspicious nature. The SSL certificate issued by Let's Encrypt adds a layer of trust that could be exploited to lure unsuspecting users.

If users have visited innovative-pyramid-715701.framer.app, they should immediately change their WeTransfer passwords and enable two-factor authentication (2FA) to secure their accounts. It is also recommended to monitor account activity for any unauthorized access and to report the incident to WeTransfer's support team. Users should exercise caution when clicking on links or entering credentials on unfamiliar websites, especially those that mimic well-known services.