altruistic-garlic-545573.framer.app

altruistic-garlic-545573.framer.app is a tenant hostname on Framer, not a separately registered domain. PhishDestroy first observed the hostname on Sep 4, 2026. The captured page title is “My Framer Site”. Current evidence score: 98/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, Google Safe Browsing, and Cloudflare Radar. On Sep 6, 2026 at 02:40 UTC, VirusTotal recorded 20 detections among 90 engines: alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar, ESET, Emsisoft, Forcepoint ThreatSeeker, Fortinet, G-Data, Google Safe Browsing, Gridinsoft, Kaspersky, LevelBlue, Lionic, Netcraft, Seclookup, Sophos, VIPRE, Webroot; Google Safe Browsing flagged the domain: Social Engineering. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Sep 9, 2026 at 22:20 UTC. URLScan completed without a malicious verdict (score 0) on Sep 4, 2026 at 23:08 UTC.

The collector marked the hostname reachable on Sep 5, 2026 at 01:19 UTC, but did not retain the HTTP response code. Framer is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 31.43.161.6 on AS16509 (AMAZON-02 - Amazon.com, Inc., US). The IP and ASN identify shared Framer infrastructure, not the tenant operator. The stored server header is Framer/feb0bfd. DOM analysis on Sep 4, 2026 at 22:22 UTC returned 98/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. The platform TLS certificate was issued by Let's Encrypt with validity through Nov 1, 2026; checked Sep 4, 2026 at 19:02 UTC.

The content indicators and 3 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.