funky-start-474757[.]framer[.]app

This domain, funky-start-474757.framer.app, is identified as a fake login phishing site. It poses a significant risk to users by attempting to steal login credentials and potentially other sensitive information. If accessed, users are likely to encounter a page that mimics legitimate login interfaces, tricking them into entering their credentials.

Analysis indicates that funky-start-474757.framer.app is flagged by 17 out of 95 security vendors on VirusTotal, suggesting that it has been recognized as a threat by a notable portion of the cybersecurity community. The domain was created on February 21, 2026, and is registered through CSC Corporate Domains, Inc. Infrastructure analysis reveals that the domain resolves to the IP address 35.71.142.77, which is located in the United States and is associated with AS16509 Amazon.com, Inc. The SSL certificate is issued by Let's Encrypt, a common provider for legitimate and malicious sites alike.

If a user has visited funky-start-474757.framer.app, they should immediately change their passwords for any accounts they may have entered credentials into. It is also recommended to monitor account activity for any unauthorized access or transactions. Users should report the incident to their organization's IT security team or a trusted cybersecurity professional for further guidance. To prevent future exposure, users should verify the URL of any login page they visit and use multi-factor authentication wherever possible.