fantastic-information-718416[.]framer[.]app

PhishDestroy identifies fantastic-information-716418.framer.app as a phishing domain engaged in brand impersonation, specifically targeting Yahoo users. The domain does not host a known drainer kit but poses a credential harvesting threat through deceptive login pages designed to steal Yahoo account credentials. The page title was generically set to 'My Framer Site', a common tactic among phishers using low-effort templates.

Technical analysis reveals that the domain was flagged by 14 out of 95 security vendors on VirusTotal, indicating broad consensus on its malicious nature. It appears on 2 security blocklists and resolves to IP address 52.223.52.2 within ASN 16509, registered through AT-88-Z. The SSL certificate was issued by Let's Encrypt (E7), which is frequently abused by phishing sites due to its free and automated issuance. The domain was registered on an unspecified date but has since been taken offline.

As of the latest assessment, the domain is offline, meaning the immediate phishing threat is mitigated. However, users who may have previously visited the site or submitted credentials should change their Yahoo passwords immediately and enable two-factor authentication. PhishDestroy recommends monitoring for similar domains using variations of the same naming pattern, as attackers often deploy multiple copies. No remaining technical risks are present while the domain is inactive, but vigilance is advised.