cuddly-wealth-365306[.]framer[.]app

PhishDestroy identifies cuddly-wealth-365306.framer.app as an active crypto-draining scam page hosted on Framer.app. The site tricks visitors into connecting crypto wallets and silently drains tokens by exploiting fake token approval pop-ups and hidden transaction prompts. Once a wallet is linked, the drainer can push out disguised “approve” or “transfer” requests that users unknowingly sign, allowing the scammer to steal balances without further interaction. All major browser wallets (MetaMask, Phantom, Rabby, etc.) are vulnerable to the same signature-based attack unless users manually review each prompt and revoke suspicious approvals immediately. This domain was flagged by 19 out of 95 VirusTotal engines, blocked by PhishingArmy and OISD, and resolves to IP 31.43.161.6 behind a Let’s Encrypt certificate. Public records show the domain was created within the last 60 days and is registered through Namecheap with privacy protection enabled, masking the true owner. The combination of a fresh domain, low-reputation hosting, and multiple blocklist hits places the risk level at elevated, meaning any interaction—even a single click—could result in irreversible asset loss. If you visited cuddly-wealth-365306.framer.app, disconnect your wallet from the site immediately, do not sign any new transactions or approvals, and revoke any token approvals you did not explicitly authorize via a reputable revocation tool such as revoke.cash or etherscan.io. Scan your device with Malwarebytes and run a full antivirus sweep to check for infostealers that may have captured seed phrases or private keys. Report the domain to PhishDestroy, your wallet provider, and the blocklists that flagged it so others are warned. Finally, consider moving remaining funds to a newly created wallet with a unique seed phrase stored offline to prevent future compromise.