ubiicredito--servicioubii2[.]replit[.]app

The domain ubiicredito--servicioubii2.replit.app is currently listed as an active generic phishing infrastructure. Abuse feeds indicate that PhishDestroy has already blocked the domain, and it appears on a single security blocklist, confirming that at least one external repository has flagged it for malicious use. DNS resolution points to the IP address 34.117.33.233, which is associated with the hosting provider Replit Inc. No authoritative nameservers were returned in the query, suggesting either a misconfiguration or the use of default DNS settings provided by the registrar. The domain registration record shows it was created through Replit Inc., a known platform for rapid application deployment, which can be abused to host short‑lived phishing sites. VirusTotal has processed the domain with scans from 95 antivirus vendors; none reported a detection, but the absence of detections does not constitute evidence of safety and should be weighed against the other indicators. No SSL/TLS certificate details, HTTP response codes, page titles, or content snapshots are available in the current intelligence set, limiting the ability to assess the site’s presentation layer. Given the confirmed blocklist entry, the active status, and the hosting relationship to a public cloud service, defenders should prioritize immediate containment: add the domain and its resolved IP address to network deny lists, monitor traffic for any outbound connections to the IP, and consider broader threat‑intel correlation to discover additional assets that may share the same hosting environment. Continuous re‑evaluation is advised, as the infrastructure could evolve or expand, and further analysis should be conducted if the site becomes reachable or additional artifacts surface.