settings3adomains[.]framer[.]ai

This domain, settings3adomains.framer.ai, carries an elevated risk level and is specifically designed for credential theft, masquerading as a legitimate login page to capture user identifiers. The page title, "Saisie de votre identifiant-", strongly suggests a French-language phishing attempt aimed at stealing usernames or email addresses.

Technical indicators paint a clear picture of malicious intent. VirusTotal flags this domain with 18 out of 95 security vendors marking it as malicious. It was registered through CSC Corporate Domains, Inc., and resolves to IP address 31.43.160.6. The domain is currently offline but has been observed on one security blocklist. Its SSL certificate is issued by Let's Encrypt (serial E8), which is commonly abused by phishers for quick setup.

To mitigate the threat of credential theft from this domain, users should never enter any personal information on suspicious login pages. If credentials were accidentally provided, passwords must be changed immediately on the legitimate service and multi-factor authentication enabled. Organizations should block the domain at the network level and monitor for any attempts to access it. PhishDestroy recommends reporting such domains to relevant authorities and security vendors to aid in takedown efforts.