excellent-palette-750075[.]framer[.]app

PhishDestroy identifies excellent-palette-750075.framer.app as a live crypto-drainer phishing domain designed to trick visitors into connecting cryptocurrency wallets and approve malicious token transfers. The site masquerades as a legitimate Framer-hosted page while silently loading drainer scripts that monitor clipboard activity and wallet connection requests, aiming to steal digital assets without the user’s explicit consent. Visitors who connect a wallet or interact with transaction prompts may see drained balances within minutes, especially if they approve suspicious token approvals or sign malicious messages. This domain should be treated as hostile and avoided entirely. This domain was flagged by PhishDestroy after security vendors reported elevated threat activity. VirusTotal analysis shows 7 out of 95 detection engines flagged this domain as malicious as of the latest scan. The domain was registered through an unlisted registrar and resolves to IP address 31.43.160.6, which is linked to multiple web-based attacks. The site uses a valid Let’s Encrypt SSL certificate to appear trustworthy, but this does not guarantee safety—many phishing sites now use legitimate certificates to evade browser warnings. The domain name itself leverages the trusted Framer.app platform to bypass suspicion, a common tactic in modern crypto-drainer campaigns. If you accidentally visited this site, do NOT connect your wallet or approve any transactions. Disconnect your wallet immediately and revoke any suspicious token approvals using tools like revoke.cash or Etherscan’s approval checker. Scan your device for malware and consider rotating wallet credentials if you entered any sensitive information. Report the domain to PhishDestroy and your wallet provider to help block future access. Always verify unknown links using PhishDestroy’s real-time database before interacting with any crypto-related site.