satisfied-pineapple-531901[.]framer[.]app

The domain satisfied-pineapple-531901.framer.app is currently offline but exhibits multiple indicators consistent with a tech support scam that impersonates Apple. VirusTotal records show that 14 of 95 security vendors have flagged the host, indicating a non‑trivial level of malicious reputation. The domain resolves to the IPv4 address 52.223.52.2, which belongs to Amazon.com, Inc. (AS16509) and is geolocated to the United States, a common hosting environment for disposable scam infrastructure. Its authoritative name servers are ns-1371.awsdns-43.org, ns-2002.awsdns-58.co.uk, ns-51.awsdns-06.com, and ns-625.awsdns-, confirming that the domain is managed through Amazon Route 53 DNS services.

The site is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, providing additional confirmation of its abusive nature. HTTP analysis returns a 404 status code, and the TLS certificate is issued by Let’s Encrypt (profile E7), which is typical for short‑lived malicious sites that require encrypted transport without cost. Detected web technologies include Framer Sites, React, HTTP/3, and HSTS enforcement, suggesting a modern front‑end stack that may be used to mimic legitimate Apple support pages. The HTML page title "MadeMaiI" offers no direct reference to Apple, and no visual evidence is available, leaving the exact content unverified.

Registration data shows the domain was created on 02 October 2020 through CSC Corporate Domains, Inc., a registrar often leveraged for bulk registrations. The listed brand target is Apple, and the scam type is identified as a tech support scam, implying that attackers may have used the domain to lure victims into fraudulent support calls or remote‑access scams. Defenders should continue to block the domain at DNS and URL filtering layers, monitor the associated IP address for any resurgence, and incorporate the detection count and blocklist entries into threat‑intel feeds.