micverifycontinuepage[.]framer[.]ai

The domain micverifycontinuepage.framer.ai presented a page titled "My Framer Site" and was configured to impersonate the Microsoft brand as part of a tech support scam. This site posed a threat by deceiving users into believing they were interacting with a legitimate Microsoft service, potentially leading to unauthorized access or financial fraud.

Technical analysis reveals that the site was flagged by 19 out of 95 VirusTotal vendors, with detection by ADMINUSLabs, alphaMountain.ai, Cluster25, CRDF, and CyRadar. It was listed on one blocklist. The domain's IP address, 52.223.52.2, is located in the United States and hosted by AS16509 Amazon.com, Inc. The domain was registered on 2018-01-06 through CSC Corporate Domains, Inc., and uses an SSL certificate issued by Let's Encrypt (E8). The nameservers include ns-1902.awsdns-45.co.uk, ns-635.awsdns-15.net, and ns-1198.awsdns-21.org.

As of the latest check, the site is offline, reducing its immediate threat. However, given its impersonation of Microsoft and the high number of security vendor detections, the risk level remains elevated. Users should avoid any interaction with this domain and ensure systems are monitored for potential compromise.