tranquil-places-459866[.]framer[.]app

The domain tranquil-places-459866.framer.app is currently active and was registered through Framer B.V. DNS resolution points to the IPv4 address 31.43.160.6. No nameserver records were returned during lookup, indicating that the authoritative name servers are either hidden or not publicly resolvable. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, confirming that at least one defensive feed classifies it as malicious.

VirusTotal analysis shows that 17 of 91 security vendors flagged the domain, providing independent corroboration of its suspicious nature. No additional intelligence such as SSL certificate details, HTTP response codes, page title, or brand targeting is available at this time, limiting the ability to describe the specific phishing payload or lure employed. The lack of publicly visible nameserver information and the modest detection count suggest a small, possibly short‑lived infrastructure that relies on the reputable Framer hosting platform for rapid deployment.

Defenders should consider adding the domain and its resolving IP address (31.43.160.6) to outbound and inbound block lists, monitor network traffic for any attempted connections, and review logs for related DNS queries. Continuous re‑evaluation is advised, as further analysis may reveal additional indicators such as content signatures or credential‑stealing forms that could refine detection rules.