full-transportation-630661[.]framer[.]app

This domain, full-transportation-630661.framer.app, is flagged as a high-risk phishing site as of July 31, 2026. Infrastructure analysis reveals it resolves to the IP address 31.43.160.6, with no nameservers (NS_NOT_FOUND) identified, which may indicate an attempt to obscure its hosting configuration or evade detection. The domain is registered through Framer B.V., a platform commonly used for web development, though it has been leveraged in this instance for malicious purposes. It appears on one security blocklist and is actively blocked by PhishDestroy, a phishing-specific detection service.

VirusTotal reports that 14 out of 91 security vendors have flagged this domain as malicious, providing further evidence of its suspicious nature. The domain remains active, with no indication of takedown or remediation efforts. The exact content or targeted brand of the phishing page is not yet analyzed, as no page title, brand target, or scam type details are available in the current intelligence.

Defenders should treat this domain as a confirmed phishing threat and implement blocking measures at the DNS, proxy, or endpoint level. Monitoring for related indicators of compromise (IOCs), such as the associated IP address, is recommended to identify potential lateral movement or secondary infections. Given the lack of nameserver data and the domain's persistence, further investigation into its hosting infrastructure may be warranted to assess the scope of the campaign.