VirusTotal
16 / 91 engine detections
Mở báo cáo“Site Not Found | Framer”
Lừa đảo: aaavvveeronsss.framer.website — Nội dung không có sẵn (HTTP 404). Tóm tắt bằng chứng: VirusTotal 16/91 (alphaMountain.ai, BitDefender, CRDF, ESET…
Phân tích chi tiết của PhishDestroy AI bên dưới được giữ bằng tiếng Anh để bảo toàn hồ sơ pháp chứng gốc.
16 / 91 engine detections
Mở báo cáoĐộc hại
Mở báo cáono community references
Mở báo cáo80/100
Mở báo cáoNo threat flag
Mở báo cáoResults reflect each source’s collection time. Zero detections do not guarantee safety. OTX references are community publications.
PhishDestroy threat report
aaavvveeronsss.framer.website is a page on Framer's website-builder platform that PhishDestroy added to its blocklist after first detecting it on 2026-08-06. It went offline on 2026-08-10, only four days later, and it was still down when last checked on 2026-10-19. No impersonated brand or specific target group could be confirmed. The page now shows only Framer's generic "Site Not Found" notice.
The current title, "Site Not Found | Framer", is the platform's default message for a removed or unpublished site, so it does not reveal what the page originally showed. That differs from our blocklist listing, which reflects the page while it was live. Free hosted builders like Framer let anyone publish a polished page under a trusted parent domain within minutes, and crypto scammers use them for short-lived fake login, wallet-connect or giveaway pages. The 16 vendor detections suggest this page posed a risk of that kind, but the exact scheme and what victims stood to lose could not be confirmed.
On 2026-08-15, 16 of 91 VirusTotal engines flagged the address. The flagging vendors include alphaMountain.ai, BitDefender, CRDF, ESET, Emsisoft, Forcepoint ThreatSeeker, Fortinet and G-Data. That is a meaningful spread of independent vendors for a page that was live for only a few days. PhishDestroy is the only blocklist in our listing that carries it.
The registrar, CSC Corporate Domains, Inc., holds the parent framer.website domain on Framer's behalf, so it says nothing about who created this subdomain or when. The page was served from Amazon.com, Inc. infrastructure in the Netherlands with a Let's Encrypt certificate, which is standard for Framer-hosted sites. The operator rented space on a mainstream platform instead of building their own infrastructure, and the page disappeared within days of detection.
If you visited this page while it was live and typed a password, recovery phrase or private key into it, treat those secrets as exposed. Change the affected passwords, turn on two-factor authentication, and move any funds to a new wallet created with a fresh seed phrase. If you connected a wallet and signed anything, review and revoke unfamiliar token approvals with a reputable approval checker. Security teams should block the hostname and treat new, randomly named framer.website subdomains appearing in email or chat as suspect. Report any reappearance to Framer and to PhishDestroy.
ns-792.awsdns-35.netLocation describes the IP network.
485e6d5be1334fe235a5d18e42df28398bb7d8574840421e233b527e3ce1c5edSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of aaavvveeronsss.framer.website · checked Aug 10, 2026
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
Không rõ→inactive
hosting_placeholder · placeholder_page
Không rõ→inactive
hosting_placeholder · placeholder_page
Không rõ→inactive
hosting_placeholder · placeholder_page
Không rõ→inactive
hosting_placeholder · placeholder_page
Không rõ→inactive
hosting_placeholder · placeholder_page
Không rõ→inactive
hosting_placeholder · placeholder_page
Không rõ→inactive
hosting_placeholder · placeholder_page
Không rõ→inactive
hosting_placeholder · placeholder_page
Không rõ→inactive
hosting_placeholder · placeholder_page
Có thể truy cập→Không có sẵn
17→16
Có thể truy cập
16/91 engine detections
View sourceNo threat flag
View sourceaaavvveeronsss.framer.website
View sourceCompare what a browser and a crawler receive, and check for Keitaro traffic routing.
aaavvveeronsss.framer.website
Listed domains receive at least one abuse report; this entry has no retained notification history.
Nếu bạn đã nhập thông tin xác thực tài khoản, thông tin cá nhân hoặc thông tin thanh toán hoặc đã tải xuống tệp từ miền này, hãy hành động ngay lập tức. Dưới đây là các nguồn lực giúp bạn báo cáo vụ việc và bảo vệ chính mình.
Chọn quốc gia của bạn để nhận liên hệ tội phạm mạng chính thức hoặc soạn thảo đơn khiếu nại →.
Template-based draft · optional AI wording assistance requires separate consent
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
Stop using the suspicious site. Open the real service through its official app or an address you already trust.
Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
aaavvveeronsss.framer.website)Dù bạn chưa nắm rõ tất cả các chi tiết — vẫn nên nộp báo cáo. Ngay cả những thông tin không đầy đủ cũng vẫn có ích cho công tác điều tra.
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
Phân tích mối đe dọa bằng cách sử dụng danh sách chặn được lưu trữ, WHOIS, DNS và bằng chứng quét công khai
Quét ngayHãy gửi các tên miền đáng ngờ đến cơ sở dữ liệu mối đe dọa của chúng tôi — để bảo vệ cộng đồng
Báo cáoCác báo cáo lừa đảo gần đây và những thay đổi về tính khả dụng được quan sát thấy
Theo dõiTheo dõi các mối đe dọa đang diễn ra hoặc phản đối danh sách này nếu bạn cho rằng đây là kết quả báo động sai
This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.
The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.
A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.