intelligent-fact-583157[.]framer[.]app

The domain intelligent-fact-583157.framer.app is currently active and has been identified as part of a phishing campaign. Registration information shows the domain was created through Framer B.V., a registrar associated with the framer.app hosting platform. DNS resolution points the domain to the IPv4 address 31.43.161.6. No authoritative nameserver records are available, as indicated by the NS_NOT_FOUND status, which may suggest a minimal DNS configuration or deliberate obfuscation.

The domain appears on a single security blocklist and is specifically blocked by the PhishDestroy service, confirming that threat‑intelligence feeds have flagged it as malicious. VirusTotal scans have returned 12 positive detections out of 91 vendor engines, providing independent confirmation of malicious activity. No additional data such as SSL certificate details, HTTP response codes, page titles, or Safe Browsing verdicts are available in the current intelligence set, leaving the exact phishing payload or targeted brand unknown. Analysts should treat the domain as high‑risk and incorporate it into network‑level blocklists, DNS filtering policies, and endpoint protection exclusions.

Continuous monitoring of the IP address 31.43.161.6 for new hostnames is advised, as the same infrastructure may be reused for further campaigns. Organizations should also review recent email traffic for links matching the domain pattern and quarantine any associated messages. Since the domain’s infrastructure details are limited, threat‑hunting efforts should focus on correlating the IP address and blocklist identifiers with internal logs to uncover potential compromise or reconnaissance activity.