# amuentodenkkde--lineamenner.replit.app - Replit app not live yet | PhishDestroy

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/amuentodenkkde--lineamenner.replit.app/
Machine-readable companion: https://phishdestroy.io/domain/amuentodenkkde--lineamenner.replit.app/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-29 13:56:59 UTC
- Last availability or vendor check: 2026-10-31 23:03:50 UTC
- Stored record updated: 2026-11-01 00:09:22 UTC
- VirusTotal detections in the stored snapshot: 14/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: flagged

## Stored labels and detections

- Automated brand label (collector metadata; not a confirmed impersonation finding): Linea

## Stored infrastructure

- Observed IP address: 34.117.33.233
- Registrar in stored WHOIS data: Replit Inc.
- Last stored HTTP status: 301
- Registration date (registry RDAP, replit.app): 2021-04-16 20:44:58 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a187f2-6f60-721b-be87-8ded9e1580e9/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/amuentodenkkde--lineamenner.replit.app
- Certificate Transparency search: https://crt.sh/?q=%25.amuentodenkkde--lineamenner.replit.app
- Web Archive lookup: https://web.archive.org/web/*/https://amuentodenkkde--lineamenner.replit.app/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Public report package

PhishDestroy records amuentodenkkde--lineamenner.replit.app, whose captured page shows a Replit "This app isn't live yet" notice.

The captured page on amuentodenkkde--lineamenner.replit.app displays a Replit placeholder stating "This app isn't live yet," explaining that no Replit App could be found at this address and inviting the owner to publish the app to make it reachable. Two links offer guidance on publishing and hosting on Replit, and the page title "Solicitud de Tarjeta de Crédito - Banco Pichincha" differs from the placeholder content actually shown.

PhishDestroy's VirusTotal check of this domain found 14 of 92 engines flagging it, with 13 malicious and 1 suspicious verdicts. ESET labeled the domain phishing, while Netcraft labeled it malicious.
Package revision: 5b748397b9245a064a7dbcb8af7e20b3574d8482effd508239cc2798085dc26a
Text generated (not scan time): 2026-10-29 20:48:06
Reviewed evidence snapshot: {"domain":"amuentodenkkde--lineamenner.replit.app","screenshot_available":true,"page_title":"Solicitud de Tarjeta de Crédito - Banco Pichincha","virustotal":{"detections":14,"engines":92,"malicious":13,"suspicious":1,"retrieved_date":"2026-10-29","analysis_date":"2026-10-29","flagging_vendors":["ESET","VIPRE","G-Data","Lionic","CyRadar","Webroot","Emsisoft","Fortinet","Netcraft","SOCRadar","Kaspersky","LevelBlue","BitDefender","alphaMountain.ai"],"vendor_labels":{"ESET":"phishing","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","CyRadar":"phishing","Webroot":"malicious","Emsisoft":"phishing","Fortinet":"phishing","Netcraft":"malicious","SOCRadar":"suspicious","Kaspersky":"phishing","LevelBlue":"phishing","BitDefender":"phishing","alphaMountain.ai":"phishing"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-10-29T19:44:11Z","final_host":"amuentodenkkde--lineamenner.replit.app","captured_on":"2026-10-29"}}
Source facts (timestamps as stored): {"record_id":1706147,"first_recorded_at":"2026-10-29 14:56:59","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":14,"denominator":92,"malicious":13,"suspicious":1,"vendors":{"ESET":"phishing","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","CyRadar":"phishing","Webroot":"malicious","Emsisoft":"phishing","Fortinet":"phishing","Netcraft":"malicious","SOCRadar":"suspicious","Kaspersky":"phishing","LevelBlue":"phishing","BitDefender":"phishing","alphaMountain.ai":"phishing"},"observed_at":"2026-10-29T16:55:41Z","checked_at":"2026-10-29 20:42:32","fetched_at":"2026-10-29T19:42:20Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":14,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","CyRadar","ESET","Emsisoft","Fortinet","G-Data","Kaspersky","LevelBlue","Lionic","Netcraft","SOCRadar","VIPRE","Webroot"],"observed_at":"2026-10-29 16:55:41","checked_at":"2026-10-29 20:42:32","fetched_at":"2026-10-29 19:42:33","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"flagged","verdict":1,"checked_at":"2026-10-31 00:01:29"},"spamhaus":{"source":"Spamhaus","verdict":"DBL_ABUSED_PHISH","checked_at":"2026-10-29 16:30:20"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-11-01 00:03:50"}}

## Stored page captures

- Primary capture: https://i.ibb.co/SDmLY8qk/e0cecd2abc15.png
  Captured: 2026-10-29 13:56:59 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a187f2-6f60-721b-be87-8ded9e1580e9.png
  Captured: 2026-10-29 13:56:59 UTC
  Source report: https://urlscan.io/result/01a187f2-6f60-721b-be87-8ded9e1580e9/
- URLScan · 2026-10-29: https://screenshots.phishdestroy.io/us/01a187c5-557c-770c-988f-ebf3748c92a0.png
  Captured: 2026-10-29 13:07:10 UTC
  Source report: https://urlscan.io/result/01a187c5-557c-770c-988f-ebf3748c92a0/
  SHA-256: a2aaf39964bb2826dfd7cd9dfd9d5173f6c459e0599a5c0812582c6d3829a13a
- URLScan · 2026-10-29: https://screenshots.phishdestroy.io/us/01a184f7-4cb3-76ab-85c2-9a44181734fd.png
  Captured: 2026-10-29 00:02:49 UTC
  Source report: https://urlscan.io/result/01a184f7-4cb3-76ab-85c2-9a44181734fd/
  SHA-256: a2aaf39964bb2826dfd7cd9dfd9d5173f6c459e0599a5c0812582c6d3829a13a
- URLScan · 2026-10-29: https://screenshots.phishdestroy.io/us/01a187e6-a2e7-75af-bf9d-414cda79fb70.png
  Captured: 2026-10-29 13:43:36 UTC
  Source report: https://urlscan.io/result/01a187e6-a2e7-75af-bf9d-414cda79fb70/
  SHA-256: 0fdc28233cc44e54e9b5d47a8e3f5dd832f4266257a6a5c5132b5aa5f945917e
- URLScan · 2026-10-29: https://screenshots.phishdestroy.io/us/01a187ec-b2bf-7368-89fe-d99ef4593abe.png
  Captured: 2026-10-29 13:50:04 UTC
  Source report: https://urlscan.io/result/01a187ec-b2bf-7368-89fe-d99ef4593abe/
  SHA-256: 0fdc28233cc44e54e9b5d47a8e3f5dd832f4266257a6a5c5132b5aa5f945917e
- URLScan · 2026-10-29: https://screenshots.phishdestroy.io/us/01a18858-48fe-7462-8f8f-df763cace6ae.png
  Captured: 2026-10-29 15:47:36 UTC
  Source report: https://urlscan.io/result/01a18858-48fe-7462-8f8f-df763cace6ae/
  SHA-256: c7db919ab32eecc3b14dc4d7f57cdcd3a9c9402566a0c6127407c35d7149c493
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/cdac5a83-c1e1-4380-9cd6-775b9febd280.png
  Captured: 2026-10-29 19:44:11 UTC
  Source report: https://radar.cloudflare.com/scan/cdac5a83-c1e1-4380-9cd6-775b9febd280
  SHA-256: 02cfb2467b15224dd4b65b3b7d17c1d75906ea6bc87de632c0833b982c2b0049

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-29T14:35:16Z",
        "uuid": "01a187f2-6f60-721b-be87-8ded9e1580e9",
        "scanned_at": "2026-10-29T13:56:31Z",
        "final_url": "https://amuentodenkkde--lineamenner.replit.app/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://amuentodenkkde--lineamenner.replit.app/",
                "from": "http://amuentodenkkde--lineamenner.replit.app/",
                "status": 307
            }
        ],
        "ip": "34.117.33.233",
        "ptr": "233.33.117.34.bc.googleusercontent.com",
        "domains": [
            "fonts.gstatic.com",
            "encrypted-tbn0.gstatic.com",
            "replit-cdn.com",
            "upload.wikimedia.org",
            "fonts.googleapis.com"
        ],
        "ips": [
            "142.251.38.131",
            "2a00:1450:4014:801::200e",
            "35.190.3.23",
            "2a02:ec80:600:ed1a::2:b",
            "2a00:1450:4014:801::200a",
            "34.117.33.233"
        ],
        "asns": [
            "15169",
            "396982",
            "14907"
        ],
        "countries": [
            "US",
            "IE"
        ],
        "doc_hash": "d049dc8ef7a41a2db677ac15a17ccaacad2bb6aafead7f24ca1fabfd32a20c94",
        "globals": [
            "togglePasswordVisibility",
            "handleSubmit"
        ],
        "cookies": [
            "GAESA"
        ],
        "tls": {
            "san": [
                "replit.app",
                "*.replit.app"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WR3",
            "subject": "replit.app",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-26T05:47:40Z",
            "valid_from": "2026-10-28T04:51:45Z"
        },
        "domain_age_days": 0,
        "apex_age_days": 0,
        "tls_age_days": 1,
        "tls_valid_days": 90,
        "requests": 7,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 99,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "bancopichincha"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Banco Pichincha"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "server": "Google Frontend",
            "content-type": "text/html; charset=UTF-8",
            "strict-transport-security": "max-age=63072000; includeSubDomains"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-29T19:47:39Z",
        "uuid": "cdac5a83-c1e1-4380-9cd6-775b9febd280",
        "scanned_at": "2026-10-29T19:44:11Z",
        "final_url": "https://amuentodenkkde--lineamenner.replit.app/",
        "status": 404,
        "history": [
            {
                "url": "https://amuentodenkkde--lineamenner.replit.app/",
                "status": 404
            }
        ],
        "dom_hash": "bebe73542fb033badbed0a2bc2f53b7deaa7a02e93da346597768b0124b34ee7",
        "doc_hash": "7635515c8b5a86a74ecc1f676f409a931d49dc9307f7c9498ef6826c84dabb60",
        "url_risks": [
            "Phishing"
        ],
        "domain_risks": [
            "Phishing",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "amuentodenkkde--lineamenner.replit.app",
                "type": "A",
                "value": "34.117.33.233"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.17",
        "verdict": {
            "tags": [
                "phishing"
            ],
            "malicious": true,
            "categories": [
                "phishing"
            ]
        },
        "whois": {
            "registrar": "Nom-IQ Limited dba Com Laude",
            "created": "2021-04-16T20:44:58Z",
            "updated": "2025-10-10T03:54:10Z",
            "expires": "2034-04-16T20:44:58Z",
            "nameservers": [
                "ns-cloud-b1.googledomains.com",
                "ns-cloud-b2.googledomains.com",
                "ns-cloud-b3.googledomains.com",
                "ns-cloud-b4.googledomains.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-29T19:42:20Z",
        "analysis_at": "2026-10-29T16:55:41Z",
        "stats": {
            "timeout": 0,
            "harmless": 45,
            "malicious": 13,
            "suspicious": 1,
            "undetected": 33
        },
        "detections": {
            "ESET": "phishing",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Emsisoft": "phishing",
            "Fortinet": "phishing",
            "Netcraft": "malicious",
            "SOCRadar": "suspicious",
            "Kaspersky": "phishing",
            "LevelBlue": "phishing",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing"
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "categories": {
            "Sophos": "information technology",
            "Webroot": "Phishing and Other Frauds",
            "alphaMountain.ai": "Information Technology, Phishing (alphaMountain.ai)",
            "Forcepoint ThreatSeeker": "web infrastructure"
        },
        "created": "2021-04-16T00:00:00Z",
        "updated": "2025-12-04T00:00:00Z",
        "first_seen": "2026-10-28T22:55:07Z",
        "dns": [
            {
                "ttl": 3600,
                "type": "A",
                "value": "34.117.33.233"
            }
        ],
        "dns_at": "2026-10-29T16:55:57Z",
        "jarm": "29d3fd00029d29d00042d43d00041d6f940079659edb62e1c38c38bd26ee84",
        "cert": {
            "san": [
                "replit.app",
                "*.replit.app"
            ],
            "issuer": "Google Trust Services / WR3",
            "serial": "ec3ae2dfc6c55a2e109aff41a0e4b4c3",
            "sha256": "9d66dbe59ada0a41e27e591854785cf65280827d651cc4eab47765cf85053250",
            "subject": "replit.app",
            "valid_to": "2027-01-26T05:47:40Z",
            "valid_from": "2026-10-28T04:51:45Z"
        },
        "whois": []
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-29T14:03:33Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "amuentodenkkde--lineamenner.replit.app"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-29T13:41:50Z",
            "first": "2026-10-29T13:41:50Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 5634
        },
        "social_tags": {
            "title": "Solicitud de Tarjeta de Crédito - Banco Pichincha"
        },
        "trackers": {
            "requests": 6,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                },
                {
                    "name": "WikiMedia",
                    "company": "Wikimedia Foundation",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://replit-cdn.com/replit-pill/replit-pill.global.js"
            ],
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 17,
                "tls": 51,
                "wait": 5224,
                "connect": 12,
                "download": 1
            },
            "response_ms": 5305
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 16424,
            "co2_grams": 0.0006,
            "cleaner_than": 61
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "216.239.32.107",
                    "host": "ns-cloud-b1.googledomains.com"
                },
                {
                    "ip": "216.239.38.107",
                    "host": "ns-cloud-b4.googledomains.com"
                },
                {
                    "ip": "216.239.36.107",
                    "host": "ns-cloud-b3.googledomains.com"
                },
                {
                    "ip": "216.239.34.107",
                    "host": "ns-cloud-b2.googledomains.com"
                }
            ],
            "zone": "replit.app"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "GAESA"
                },
                {
                    "name": "WMF-Uniq",
                    "secure": true,
                    "http_only": true,
                    "same_site": "None"
                }
            ]
        },
        "location": {
            "ip": "34.117.33.233",
            "asn": "396982",
            "org": "Google LLC",
            "city": "Kansas City",
            "country": "US"
        },
        "ssl": {
            "issuer": "Google Trust Services / WR3",
            "subject": "replit.app"
        },
        "dns": {
            "A": [
                "34.117.33.233"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=63072000; includeSubDomains",
            "message": "HSTS header does not contain the preload directive."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=63072000; includeSubDomains",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "34.117.33.233",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://amuentodenkkde--lineamenner.replit.app"
            ]
        },
        "linked_pages": {
            "internal_count": 1
        },
        "headers": {
            "headers": {
                "server": "Google Frontend",
                "content-type": "text/html; charset=UTF-8",
                "strict-transport-security": "max-age=63072000; includeSubDomains"
            }
        }
    }
}
```