sensational-center-308075[.]framer[.]app

Analysis of sensational-center-308075.framer.app indicates that the domain is currently active and hosted on the IP address 31.43.160.6. Registration information shows the domain was created through Framer B.V., a legitimate web‑hosting provider, but no nameserver records are publicly available, which hampers typical DNS‑based reputation checks. VirusTotal has recorded 15 detections out of 91 scanned security vendors, confirming that a subset of scanners classify the site as malicious. The domain is also listed on two independent phishing blocklists, specifically PhishDestroy and OpenPhish, both of which specialize in aggregating confirmed phishing infrastructure. These listings reinforce the high‑risk assessment despite the relatively modest detection count on VirusTotal.

No public SSL certificate details, HTTP response codes, or page‑title information have been disclosed, so the surface‑web characteristics of the site remain unverified. The lack of visible page metadata prevents a more granular determination of the phishing campaign’s target brand or the specific social‑engineering technique employed. Nonetheless, the convergence of multiple vendor detections and inclusion on dedicated phishing blocklists provides concrete evidence that the domain is being used for generic phishing activities.

Defenders should treat sensational-center-308075.framer.app as hostile. Immediate mitigation steps include adding the domain and its resolving IP 31.43.160.6 to network‑level deny lists, updating web‑proxy and DNS filtering policies to block queries, and monitoring for any outbound connections to the address. Security operations teams are advised to incorporate the domain into threat‑intel feeds and to alert users about potential credential‑harvesting attempts that may reference the domain in email or messaging vectors.