frame.io

Domain

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 19, 2026

Last Seen

October 20, 2026

API

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

Legitimate SaaS platform used to host phishing content; not attacker-owned

This indicator was flagged as a false positive by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 2

Infrastructure · 5

Malware trackers · 2

Web search · 2

Related Clusters (1)

Phantom Preview Phishing Campaign Targets Microsoft 365 Users via Frame.io

4h ago·1 sources

Related Entities

Phishing Phantom Preview DigitalOcean Cloudflare T1566.001 - Spearphishing Attachment T1566.002 - Spearphishing Link T1566 - Phishing Cloudflare Pages Enom Cloudflare Turnstile

frame.io

IOC Validation

Pivot to external tools

Related Clusters (1)

Phantom Preview Phishing Campaign Targets Microsoft 365 Users via Frame.io

Related Articles (3)

Frame Io Phishing Aitm Share Link

Scammers Abuse Frame.io Notifications to Steal Microsoft 365 Credentials

NVIDIA Advances Agentic Security for Media, From European Public Service Broadcasting to Global Content Production

Related Entities