framex-adv.info
Appeared in the .info zone on Tuesday, September 15, 2026; by the end of that day the census found registrar placeholder. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Page is the standard IONOS 'Diese Domain ist bereits registriert' registrar placeholder (one of 1427 identical pages), with the only form being IONOS's domain-search box; 'framex-adv' reads as a plausible advertising/frame business name and the framex≈aramex typo claim is weak with no Aramex branding or parcel content anywhere.
The page impersonates IONOS by displaying its logo, branding, and login language ('Diese Domain ist bereits bei IONOS registriert', 'Domain verwalten') on a typosquat domain (framex-adv.info ≈ aramex). The form posts to itself with hidden synthetic parameters typical of credential-capture phishing, and the 1427-domain cluster with identical pages indicates an organized campaign targeting multiple brand typos.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Tuesday, September 15, 2026
Same data as JSON: /api/zone/domain/framex-adv.info. This page is not indexed by search engines and does not link to the site it describes.