affectionate-symptoms-648833[.]framer[.]app

This domain, affectionate-symptoms-648833.framer.app, is identified as a high-risk phishing resource designed to harvest user credentials through deceptive web pages. Analysis indicates the site employs generic phishing tactics, likely mimicking a legitimate service to trick users into submitting sensitive information. The page title, 'My Framer Site,' suggests an attempt to impersonate a web development or hosting platform, though no specific brand association is confirmed. No direct evidence of a cryptocurrency drainer kit is observed, but the infrastructure aligns with credential theft campaigns. Infrastructure analysis reveals the domain was registered on October 02, 2020, through CSC Corporate Domains, Inc. and currently resolves to the IP address 35.71.142.77, hosted on Amazon.com, Inc. infrastructure (AS16509). The domain is flagged by Google Safe Browsing as phishing and appears on two security blocklists, including PhishDestroy and PhishingDB. VirusTotal detection metrics show 18 out of 95 security vendors have classified this domain as malicious. The SSL certificate, issued by Let's Encrypt (serial number E7), is a common tool used by threat actors to lend a false sense of legitimacy to phishing pages. As of the latest assessment, affectionate-symptoms-648833.framer.app has been taken offline, likely due to enforcement actions by hosting providers or security teams. Despite its current inactive status, residual risk remains for users who may have interacted with the domain prior to its removal. Organizations and individuals are advised to monitor for unauthorized access attempts linked to credentials potentially exposed through this campaign. Network-level blocking of the IP 35.71.142.77 and domain-based filtering are recommended to prevent future interactions with this infrastructure. Users should verify the authenticity of any site requesting sensitive information, particularly those hosted on third-party platforms or with unusual subdomain structures.