tactical-feel-300287[.]framer[.]app

This domain, tactical-feel-300287.framer.app, was identified as a brand impersonation threat designed to mimic Microsoft login pages. Such sites are typically used to harvest credentials, payment details, or other sensitive information by deceiving users into believing they are interacting with a legitimate service. The page displayed a generic title, 'My Framer Site,' which may have been intended to obscure its malicious purpose while presenting a false Microsoft interface to victims.

Analysis indicates the domain was registered through CSC Corporate Domains, Inc. on February 21, 2026, and resolved to the IP address 35.71.142.77, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509) in the United States. At the time of assessment, 20 out of 95 security vendors on VirusTotal flagged the domain as malicious, and it appeared on at least one security blocklist. The SSL certificate was issued by Let's Encrypt (serial number E7), which, while common for legitimate sites, is frequently exploited by threat actors to lend an appearance of authenticity.

If a user visited tactical-feel-300287.framer.app and entered credentials or other sensitive information, immediate action is required. Affected individuals should reset passwords for any accounts accessed from the site, enable multi-factor authentication where available, and monitor accounts for unauthorized activity. Devices used to access the domain should be scanned for malware, and any saved credentials in browsers or password managers should be reviewed and updated. Organizations should consider blocking the domain and associated IP address (35.71.142.77) at the network level to prevent further exposure.