resilient-tenets-817241[.]framer[.]app

This domain, resilient-tenets-817241.framer.app, is currently flagged as a high-risk credential phishing site based on observable infrastructure and security vendor assessments. Analysis indicates the domain was registered on October 10, 2025, and remains active as of July 12, 2026, resolving to the IP address 35.71.142.77, which is hosted on Amazon.com, Inc. infrastructure (AS16509). The domain returns an HTTP 200 status code, suggesting a live and accessible web page, while its SSL certificate is issued by Let's Encrypt (serial E7), a common certificate authority for both legitimate and malicious sites. The page title, 'My Framer Site,' does not explicitly reveal the targeted brand or service, leaving the exact nature of the phishing content uncertain without further analysis. However, the domain is detected on two security blocklists and is flagged by 17 out of 95 security vendors on VirusTotal, indicating a consensus among multiple detection engines regarding its malicious nature. Technologies detected on the domain include Framer Sites, React, HSTS, and HTTP/3, which are consistent with modern web development practices but do not inherently confirm malicious intent. Infrastructure analysis reveals the domain was registered through an automated process associated with ASN 16509, a common hosting provider for both legitimate and malicious content. The domain's inclusion on blocklists such as PhishDestroy and PhishingDB further supports its classification as a phishing threat. Defenders should treat this domain as active and high-risk, implementing network-level blocks or monitoring for connections to 35.71.142.77 and the domain itself. Given the lack of explicit brand targeting in the available data, additional forensic analysis of the site's content is recommended to determine the specific phishing lure or victim profile.