id-spectrum-net4-0[.]framer[.]website

The domain id-spectrum-net4-0.framer.website, now offline, is identified as a phishing site imitating a webmail login page. It has been flagged as malicious by 16 out of 91 vendors on VirusTotal, indicating significant detection across multiple security platforms. The domain is also listed on one public blocklist, specifically PhishDestroy's, highlighting its recognition as a threat.

Registered through Framer, the domain used Let's Encrypt for its SSL certification, a common choice for attackers due to its free and automated nature. The hosting IP, 31.43.161.6, does not show a widespread association with other malicious activities, suggesting this domain might have been part of a targeted campaign rather than a large-scale operation.

The phishing site aimed to harvest credentials by masquerading as a legitimate webmail login page. Such tactics are effective in deceiving users into entering their personal information, which can then be exploited for unauthorized access to email accounts. The domain's offline status mitigates immediate risk, but the initial detection and takedown underscore the importance of rapid response to emerging threats. PhishDestroy's proactive measures in identifying and blocking this domain have contributed to its swift removal from the internet.