golden-champion-116409[.]framer[.]app

golden-champion-116409.framer.app is identified as a generic phishing domain. While the specific brand impersonated is not known, the site was observed to have a page title 'My Framer Site', which suggests it may have been used to mimic a legitimate Framer application or service. This domain presents a significant risk to users who may inadvertently enter sensitive information, such as login credentials or personal data.

Infrastructure analysis reveals that the domain is registered through Framer and resolves to IP address 31.43.160.6, located in the Netherlands (NL) under Framer B.V. The domain was created on May 01, 2026, and is currently listed as offline. It appears on one security blocklist and has been flagged by 23 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Let's Encrypt, with the serial number E8, which is a common practice for creating secure, but fraudulent, web pages.

As of the latest update, the domain is reported as offline, which reduces the immediate threat to potential victims. However, the fact that it was previously active and flagged by multiple security vendors indicates that the infrastructure could be reactivated at any time. Users are advised to exercise caution when interacting with any Framer-related domains and to verify the authenticity of the site by checking the URL and SSL certificate. Security teams should monitor for any signs of the domain coming back online and ensure that necessary defenses are in place to block access to this and similar domains.