home-t-metamssk[.]framer[.]ai

This domain, home-t-metamssk.framer.ai, is identified as a credential harvesting phishing site designed to deceive users into submitting sensitive login information. Analysis indicates the infrastructure was crafted to mimic trusted platforms, likely targeting individuals through fraudulent login portals or fake authentication prompts. The domain’s design and hosting environment suggest an intent to exploit user trust in well-known services, potentially leading to account takeovers or unauthorized access to personal and financial data.

Evidence supporting this assessment includes detection by 6 out of 95 security vendors on VirusTotal, indicating a moderate but consistent level of malicious recognition. The domain was registered on January 06, 2018, through CSC Corporate Domains, Inc., and resolves to the IP address 35.71.142.77. It appears on one security blocklist, specifically PhishDestroy, and employs a Let’s Encrypt SSL certificate, which, while common for legitimate sites, is frequently abused in phishing operations to create a false sense of security. Technologies detected on the domain include Framer Sites, React, HSTS, and HTTP/3, which are consistent with modern web development practices but do not preclude malicious use.

Users who have visited home-t-metamssk.framer.ai or interacted with its content should take immediate action to mitigate potential risks. If credentials were entered, affected accounts should be secured by changing passwords and enabling multi-factor authentication where available. Monitoring for unauthorized transactions or suspicious activity is recommended, particularly for financial or email accounts. Additionally, users should scan their devices for malware or unwanted software that may have been introduced through the phishing site. Reporting the domain to relevant security teams or abuse contacts can aid in broader mitigation efforts.