strong-objects-195230[.]framer[.]app

This report details a malicious domain, strong-objects-195230.framer.app, which was designed to impersonate the Microsoft brand for a tech support scam. The site, titled "My Framer Site," posed as a legitimate Microsoft resource to deceive users into believing they required technical assistance, thereby creating a risk of credential theft, financial fraud, or unauthorized remote access to victims' systems.

Technical analysis reveals the domain was flagged by 22 out of 95 VirusTotal vendors, with detections from ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, and Cluster25. The domain is registered with CSC Corporate Domains, Inc., and was created on 2026-02-21. It is hosted on IP address 52.223.52.2, which is located in the United States and belongs to AS16509 Amazon.com, Inc. The site used a Let's Encrypt SSL certificate (E7) for HTTPS.

As of the time of analysis, the domain is down and offline, indicating it has been taken down or is no longer operational. The risk level is assessed as high due to the confirmed impersonation of a major brand and the high number of security vendor detections, but the immediate threat is mitigated by its current inactive status.