vast-level-897442[.]framer[.]app

This domain, vast-level-897442.framer.app, is a confirmed generic phishing domain currently active as of July 24, 2026. Evidence from threat intelligence sources indicates a high risk level, with 15 out of 91 security vendors on VirusTotal flagging the domain as malicious. The domain is listed on two security blocklists and has been blocked by PhishDestroy and OpenPhish.

It resolves to IP address 31.43.160.6, though no nameservers were found (NS_NOT_FOUND). Registration was handled through Framer B.V., a known web hosting and development platform. The exact page content and impersonated brand have not been identified in the available data, so the specific scam type remains unconfirmed pending further analysis.

Defenders should block access to this domain at the network and email gateway levels, monitor for any linked subdomains or related infrastructure under the framer.app domain, and review logs for any user interactions or data submissions. Given the active status and high detection rate, immediate action to restrict access is recommended to prevent potential credential theft or data compromise.