roblox-condo-pages--condohubex[.]replit[.]app

On 7 August 2026, analysis flagged the subdomain roblox-condo-pages--condohubex.replit.app as part of an active phishing infrastructure. The domain is registered through Replit Inc., a platform that provides hosted development environments, and current WHOIS data shows no further registrar details beyond the provider name. DNS resolution returns the single IPv4 address 34.117.33.233; reverse‑lookup and ASN information are not supplied in the available intelligence. The domain’s nameserver records are unavailable (NS_NOT_FOUND), indicating that standard DNS delegation information could not be retrieved at the time of analysis.

The host has been added to at least one security blocklist and is explicitly blocked by the PhishDestroy mitigation service, reinforcing the assessment that the domain is being used for malicious purposes. No additional detection signals from other vendors, Safe Browsing, OTX, or SSL/TLS analyses are present in the current dataset, and the page title or content has not been captured. Consequently, the precise brand or service being spoofed cannot be confirmed, and the exact phishing vector (e.g., credential‑stealing login page, malicious download) remains unknown. Defenders should treat the address as hostile.

Immediate actions include adding the domain and its resolving IP address to DNS‑based block lists, firewall deny rules, and endpoint protection exclusions. Continuous monitoring of the IP 34.117.33.233 for new subdomains or related activity is recommended, as well as periodic re‑query of the domain for changes in nameserver configuration, SSL certificates, or page content. If the organization hosts services on the same IP range, network segmentation and outbound traffic filtering to unknown external destinations can reduce exposure. Finally, reporting the abuse to Replit Inc. via their abuse contact may accelerate takedown of the malicious host.