attyahoomail[.]framer[.]website

Analysis of attyahoomail.framer.website shows the domain is currently active and classified as a generic phishing site with an elevated risk rating. VirusTotal scans have returned detections from 14 of 91 security vendors, indicating a moderate consensus among scanning engines that the domain hosts malicious content. The domain is listed on a single public security blocklist and is explicitly blocked by the PhishDestroy filtering service, reinforcing the perception of malicious intent.

Registration data reveals that the domain was created through the Framer platform, a registrar commonly used for rapid deployment of short‑lived malicious infrastructure. No additional intelligence such as IP address, autonomous system number, or SSL certificate details have been published, leaving the hosting environment uncharacterized. Likewise, page title, brand targeting, or kit information have not been disclosed, so the specific phishing lure (e.g., credential harvesting for a particular service) remains unknown.

Defenders should prioritize immediate containment by adding attyahoomail.framer.website to outbound and inbound denial lists across firewalls, proxy servers, and email gateways. Continuous monitoring of VirusTotal updates and any emergence of new blocklist entries is advised, as further detections could indicate expansion of the campaign. Given the elevated risk level and active status, organizations are encouraged to treat any traffic to this domain as malicious and to investigate any internal logs for prior connections that may have evaded existing controls.