personal-business-976533[.]framer[.]app

Analysis of personal-business-976533.framer.app shows that the domain was hosted on Amazon’s infrastructure (ASN 16509) and resolved to IP address 35.71.142.77, a location associated with the United States. The site deployed a Let's Encrypt/E7 SSL certificate, indicating that TLS was in place, and the HTTP response returned a 404 status code. The page title reported by the scanner is "My Framer Site," and the underlying technology stack includes Framer Sites, React, HSTS, and HTTP/3, all of which are typical of modern web‑hosting platforms but provide no indication of legitimate content.

VirusTotal scans flagged the domain by 14 of 95 security vendors, reinforcing the suspicion of malicious intent. The domain appears on a single public blocklist and has been actively blocked by the PhishDestroy service, confirming that defensive communities consider it a phishing threat. Registration metadata lists the registrar as AT-88-Z, and no nameserver information was returned (NS_NOT_FOUND).

The current operational status is offline, suggesting the infringing site has been taken down or is no longer reachable. Defenders should continue to block the domain at perimeter defenses, monitor the associated IP range for any re‑use, and update internal threat intelligence feeds with the observed indicators, including the SSL certificate fingerprint, IP address, and observed technology signatures. Since the site is already offline, proactive measures focus on preventing future re‑deployment of similar Framer‑based phishing infrastructure and ensuring that any residual references in email or URL‑based filters are kept up to date.