getting-exo-dus[.]framer[.]media

The domain getting-exo-dus.framer.media is a generic phishing site designed to deceive users into disclosing sensitive information, classified as banking phishing. No specific brand or drainer kit was impersonated. As of the latest verification, the site has been taken offline, but it previously posed an elevated risk to visitors.

Technical analysis shows that getting-exo-dus.framer.media was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and alphaMountain.ai. It appeared on 3 security blocklists, specifically PhishDestroy, MetaMask, and SEAL. The domain was registered through CSC Corporate Domains, Inc. on February 21, 2026, and resolved to the IP address 52.223.52.2, hosted on Amazon.com, Inc. infrastructure in the US. The SSL certificate was issued by Let's Encrypt (E7), and the observed page title was 'Site Not Found | Framer' with an HTTP 404 status. Technologies detected included Framer Sites, React, HSTS, and HTTP/3.

Users who may have interacted with getting-exo-dus.framer.media should immediately change any exposed credentials, enable two-factor authentication (2FA) on all accounts, and monitor for unauthorized transactions or fraudulent activity. If financial or cryptocurrency details were entered, revoke any token approvals and consider moving funds to a new wallet. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to assist in broader mitigation efforts.