prestamosubii--prestamo1.replit.app
“Ubiipagos”
Evidence Summary
prestamosubii--prestamo1.replit.app is a subdomain of replit.app. PhishDestroy first observed the hostname on Sep 11, 2026. The captured page title is “Ubiipagos”. Current evidence score: 85/100 (critical).
Positive findings are stored from 3 sources: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 5 detections among 89 engines: ChainPatrol, alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, LevelBlue on Sep 11, 2026 at 12:43 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Sep 11, 2026 at 10:20 UTC. Non-positive and contextual checks: ScamAdviser assigned a trust score of 15/100 (Very Likely Unsafe); no observation timestamp was retained. Google Safe Browsing returned no flag on Sep 11, 2026 at 12:44 UTC. URLScan completed without a malicious verdict (score 0) on Sep 11, 2026 at 03:30 UTC.
HTTP 200 was recorded on Sep 11, 2026 at 11:03 UTC. Registration records for the registrable domain replit.app list Replit as the registrar. At collection time, the hostname resolved to 34.117.33.233 on AS396982 (GOOGLE-CLOUD-PLATFORM - Google LLC, US). The recorded endpoint location is Kansas City, US. The stored server header is Google Frontend. DOM analysis on Sep 11, 2026 at 06:20 UTC returned 85/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists WR3 as the certificate issuer.
The content indicators and 3 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.
Threat Response Pipeline
Public Blocklist Status
Blocklist coverage
11 monitored external feeds · stored snapshot Sep 11, 2026
9 monitored external feeds No match
Stored Capture · 2 sources
Domain Intelligence
Kansas City, USTechnical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Registration: replit.app
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For the registrable domain replit.app behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 5 high-confidence technologies identified
VirusTotal Analysis · stored analysis
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of prestamosubii--prestamo1.replit.app · checked Sep 11, 2026
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Related Infrastructure & Reports
Infrastructure map · prestamosubii--prestamo1.replit.app
Each spoke is one reason two domains are linked. Ring size marks VirusTotal detections; dashed nodes are already offline. Full lists below.
Content matches 4
Shared IP 34.117.33.233 6
Multiple reports share this IP.
Same registrar: Replit 6
security-server-page--dylaneagle.replit.app 
Recent threat reports 4
Recently added threat reports.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive