gray-everything-964781[.]framer[.]app

PhishDestroy identifies gray-everything-964781.framer.app as an active high-risk portal scam impersonating a generic login or data entry page. This domain resolves to IP 31.43.161.6 and is currently hosted on Framer.app, a platform often abused by threat actors for low-cost phishing deployments. The site’s default title ‘My Framer Site’ masks its true purpose, luring victims into entering credentials or sensitive data under false pretenses. Security vendors have already blacklisted this domain, with 21 out of 95 engines flagging it as malicious, including protections from OpenPhish and PhishingArmy, indicating widespread recognition of the threat. This domain was registered recently and leverages Framer.app’s free tier to evade detection. VirusTotal analysis confirms a 21/95 detection ratio, with no legitimate use identified. The Let’s Encrypt SSL certificate adds a false sense of security, tricking users into believing the site is trustworthy. Threat intelligence shows the domain has been active for several weeks and continues to operate despite multiple blocklist inclusions, suggesting ongoing campaign activity. If you visited gray-everything-964781.framer.app, assume your data may have been compromised. Disconnect from the internet if you entered any credentials or sensitive information. Run a full antivirus scan and change passwords for all potentially exposed accounts immediately. Report the domain to your security team or through platforms like OpenPhish or PhishingArmy to help block further abuse. Never re-enter any information on this site, and warn others who may have encountered it.