secure-page-builder--sabanobabatunde[.]replit[.]app

This domain is flagged as a high-risk brand impersonation of Microsoft, active as of July 12, 2026. The page title is 'Security verification - Microsoft account', indicating an attempt to harvest Microsoft account credentials. Infrastructure analysis reveals the domain resolves to IP 34.117.33.233, hosted on Google Cloud in the United States, and uses an SSL certificate issued by Google Trust Services (WR3). The domain is registered through Replit and employs technologies including Google Cloud, jQuery, HSTS, Google Hosted Libraries, Google Cloud Trace, Google Cloud CDN, and HTTP/3. VirusTotal scanning shows 14 of 91 security vendors flag this domain as malicious, and it appears on one security blocklist (PhishDestroy). The Gridinsoft trust score is 0/100. No nameservers were found (NS_NOT_FOUND). Defenders should block this domain at the network and email security layers, monitor for any Microsoft credential submissions, and consider adding it to threat intelligence feeds. The exact page content beyond the title has not been analysed, but the combination of the Microsoft-branded title, low trust score, and multiple vendor detections strongly supports a phishing classification.