rotating-behavior-140761[.]framer[.]app

This report details a fraudulent domain impersonating Microsoft for tech support scams. The site, titled "My Framer Site," falsely represents itself as a Microsoft-branded entity to deceive visitors into believing they are interacting with legitimate technical support. The primary threat is that users may be tricked into providing sensitive information, remote access to their devices, or payment for unnecessary services.

Technical analysis reveals the domain was created on 2026-02-21 and registered through CSC Corporate Domains, Inc. The site is hosted on IP address 35.71.142.77, which is located in the United States and belongs to AS16509 Amazon.com, Inc. The domain uses a Let's Encrypt SSL certificate with serial number E7. VirusTotal analysis shows 20 out of 95 security vendors flagged the domain as malicious. It has been flagged by ADMINUSLabs, alphaMountain.ai, BitDefender, Cluster25, and CRDF, and appears on 1 blocklist.

The domain is currently DOWN or OFFLINE, reducing immediate risk. However, the high detection rate and impersonation of a major brand indicate a significant threat if the site becomes active again. The risk level is assessed as high due to the potential for financial fraud and data theft.