secure-page-builder--lucasas22[.]replit[.]app

The domain secure-page-builder--lucasas22.replit.app is actively flagged as malicious by 21 out of 91 vendors on VirusTotal. This high detection rate indicates a well-recognized threat, despite its recent detection on June 19, 2026. The domain is hosted on an IP address belonging to Google LLC in the United States, which could lend it an air of legitimacy to unsuspecting users.

Registered through Nom-IQ Limited dba Com Laude, the domain uses an SSL certificate issued by Google Trust Services. While this might suggest a secure platform, it actually serves to deceive users into believing the site is legitimate. The domain's platform risk score is notably high at 88 out of 100, underscoring the potential danger it poses.

The domain is currently listed on one public blocklist, specifically PhishDestroy's, which highlights its recognition as a threat. Although its abuse score remains low at 4 out of 100, this does not diminish the risk it presents. The combination of a high platform risk score and multiple VirusTotal flags indicates that this domain is part of a sophisticated phishing operation.

Secure-page-builder--lucasas22.replit.app exemplifies the challenges in combating phishing attacks, as it exploits the trust users place in familiar platforms and services. Its presence on a platform like Replit, combined with a Google-issued SSL certificate, emphasizes the need for continuous vigilance and awareness of phishing tactics. Users should remain cautious when encountering such domains, especially those that appear secure or legitimate at first glance.