secure-page-editor--melisapritt[.]replit[.]app

PhishDestroy has identified secure-page-editor--melisapritt.replit.app as a high-risk credential phishing site actively targeting users with a fake sign-in page. This specific threat involves credential theft, where attackers attempt to harvest usernames and passwords by presenting a deceptive login interface. The site's domain, hosted on Replit, is a known platform for rapid deployment, making it a common vector for short-lived phishing campaigns.

The technical analysis reveals several concerning indicators. VirusTotal data shows 20 out of 95 security vendors flagging this domain as malicious, reflecting a strong consensus on its threat nature. The site resolves to IP 34.117.33.233, which is associated with Google Cloud infrastructure. The SSL certificate is issued by Google Trust Services (WR3), lending a false sense of legitimacy. Additionally, the domain appears on at least one security blocklist, and the site remains active as of the latest check. The page title, "Sign in to your account," is a generic lure used to trick visitors into entering credentials. The domain was likely created very recently, a common tactic to avoid detection.

To protect against this specific credential theft campaign, users should never enter login credentials on this site. Always verify the URL before signing in, especially if you received an unsolicited link. Enable two-factor authentication on your accounts to add an extra layer of security. If you have already submitted credentials, change your passwords immediately and monitor your accounts for suspicious activity. Report the domain to your email provider and security tools to help block further attacks.