first-agency-743956.framer.app

first-agency-743956.framer.app is a tenant hostname on Framer, not a separately registered domain. PhishDestroy first observed the hostname on Sep 5, 2026. Stored content metadata identifies Genericemail as the apparent target. The captured page title is “Site Not Found | Framer”. Stored page analysis classifies the content as impersonation. Current evidence score: 92/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, Cloudflare Radar, and URLScan. VirusTotal recorded 14 detections among 90 engines: alphaMountain.ai, BitDefender, CRDF, ESET, Emsisoft, Fortinet, G-Data, Gridinsoft, LevelBlue, Lionic, Netcraft, OpenPhish, Sophos, Webroot on Sep 7, 2026 at 06:14 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. URLScan returned a malicious verdict with score 100; scan metadata linked the capture to Genericemail and assigned phishing as its category on Sep 5, 2026 at 17:08 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Sep 9, 2026 at 22:20 UTC. Google Safe Browsing returned no flag on Sep 7, 2026 at 06:14 UTC.

The collector marked the hostname reachable on Sep 5, 2026 at 14:59 UTC, but did not retain the HTTP response code. Framer is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 31.43.160.6 on AS16509 (AMAZON-02 - Amazon.com, Inc., US). The IP and ASN identify shared Framer infrastructure, not the tenant operator. The stored server header is Framer/feb0bfd. DOM analysis on Sep 5, 2026 at 18:22 UTC returned 88/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. The platform TLS certificate was issued by Let's Encrypt with validity through Nov 1, 2026; checked Sep 5, 2026 at 16:02 UTC.

The content indicators and 3 positive source findings support the current Genericemail-themed impersonation classification.