powerful-choice-040334[.]framer[.]app

Analysis of the domain powerful-choice-040334.framer.app indicates that it is currently active and associated with a high‑risk generic phishing campaign. The domain was registered through the Framer service, which provides website hosting and deployment tools, and its DNS resolution points to the IPv4 address 31.43.160.6. No authoritative nameserver records are returned, as the nameserver query returned NS_NOT_FOUND, which may indicate misconfiguration or intentional obfuscation. VirusTotal has recorded detections from 16 of 91 security vendors, demonstrating that a substantial minority of scanners consider the host malicious. The available intelligence does not include a page title, observed landing page content, or any additional infrastructure such as email servers or certificate details, so the full attack vector cannot be fully described. Nevertheless, the combination of a newly created Framer‑hosted sub‑domain, active status, and multiple vendor detections supports a high confidence assessment that the domain is being used for phishing. Defenders should add the domain and its resolved IP address to block lists, monitor DNS queries for related Framer sub‑domains, and consider sinking any traffic to the address in sandbox environments for deeper inspection. Ongoing observation is recommended to detect any changes in infrastructure, such as the appearance of legitimate nameserver records or additional hosting services.