attractive-states-704494[.]framer[.]app
“Dropbox”
attractive-states-704494.framer.app — 内容不可用. 诈骗类型:Generic Phishing. 证据摘要: VirusTotal 21/94 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, Cluster25); URLQuery 4 alerts; PhishDestroy score 100/100. 注册商: Framer.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
PhishDestroy identifies attractive-states-704494.framer.app as an active fake investment scam site under investigation for phishing activities. The domain is currently unresolved by VirusTotal with 21/95 detections, indicating it has evaded immediate automated detection despite being listed on three security blocklists: OpenPhish, PhishingArmy, and OISD. This domain resolves to IP 31.43.160.6 and uses a Let's Encrypt SSL certificate, which may lend false credibility to unsuspecting users. The absence of detections on VirusTotal suggests a need for manual review and proactive blocking by security teams. This domain was flagged by security researchers due to its association with fraudulent investment schemes, specifically targeting individuals seeking financial opportunities. Key technical indicators include its recent creation date (exact date undisclosed), resolution to a high-risk IP address (31.43.160.6), and the use of a widely trusted but easily obtainable SSL certificate. Trust scores are critically low, as evidenced by its presence on three prominent blocklists. The combination of these factors—low detection rates, high-risk hosting, and known phishing associations—elevates the risk profile of this domain to an active threat requiring immediate attention. To mitigate exposure to this fake investment scam, organizations and individuals should implement domain blocking for attractive-states-704494.framer.app and IP 31.43.160.6 at the network perimeter. Security teams should configure firewalls, DNS filters, and endpoint protection to block traffic to this domain. Additionally, users should be warned against engaging with unsolicited investment offers or clicking links from unknown sources. Immediate reporting to cybersecurity platforms like OpenPhish or PhishingArmy can help improve detection rates and prevent further victimization. Proactive monitoring for similar domains using the same IP or SSL certificate is also recommended to identify related fraudulent activities.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | attractive-states-704494.framer.app |
malicious | Sinkholed |
| Cloudflare DNS | attractive-states-704494.framer.app |
malicious | Sinkholed |
| OpenDNS | attractive-states-704494.framer.app |
phishing | Phishing Block |
| DNS4EU | attractive-states-704494.framer.app |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of attractive-states-704494.framer.app · checked Apr 6, 2026
证据与外部报告
PD-20260406-EB93FD Recipient: abuse@framer.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。