spectacular-confidence-794399[.]framer[.]app

PhishDestroy identifies spectacular-confidence-794399.framer.app as a credential-phishing decoy impersonating the my.juno brand. The domain hosts a fake login page designed to harvest user credentials, and it is currently active and under active investigation. No drainer kit artifacts have been recovered from the page source at this time. This domain was flagged with a VirusTotal score of 23/95 detections, resolving to IP 31.43.160.6 via Let’s Encrypt SSL. Registrar information shows it is hosted on Framer.app with an unknown creation date, is not blocked by Google Safe Browsing, and appears on one additional blocklist. The page remains live and continues to serve the phishing content. PhishDestroy recommends blocking IP 31.43.160.6 at the network perimeter and monitoring for exfiltrated credentials. Although current VT coverage is low, the presence on one blocklist and active takedown requests suggest the risk profile is evolving; users should avoid interaction and report any observed credential submissions to the legitimate my.juno support team.