relieved-meeting-759160[.]framer[.]app

This report analyzes the domain relieved-meeting-759160.framer.app, which is assessed as a banking phishing threat. The page title "My Framer Site" suggests the domain was used as a generic landing page, likely to host fraudulent login forms or credential harvesting interfaces targeting banking customers. The site posed a direct threat of financial credential theft, exposing users to account takeover and unauthorized transactions.

Technical analysis reveals the site was flagged by 16 out of 95 VirusTotal vendors, with detections from ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, and CyRadar. The domain is hosted on IP address 52.223.52.2, allocated to AS16509 Amazon.com, Inc. in the United States. It was registered through registrar AT-88-Z and uses a Let's Encrypt SSL certificate with serial E7. The domain appears on two blocklists.

The domain is currently DOWN/OFFLINE, indicating the phishing infrastructure has been taken down or deactivated. The risk level is low at present due to the site's inactive status, but the domain should remain on threat intelligence blocklists to prevent re-registration or future misuse. Users who may have accessed the site while active should change banking credentials and monitor accounts for suspicious activity.