secure-page-editor--ewakley25[.]replit[.]app

The domain secure-page-editor--ewakley25.replit.app is currently active and has been classified as a credential phishing site. Infrastructure analysis shows it resolves to the IPv4 address 34.117.33.233. The domain lacks publicly resolvable nameserver records, as indicated by a NS_NOT_FOUND status. Reputation services have flagged the site: Google Safe Browsing lists it under the SOCIAL_ENGINEERING category, and VirusTotal reports that 17 of 91 security vendors have identified it as malicious. The combination of active status, malicious classification, and the presence of a dedicated IP suggests a purpose‑built hosting environment for credential harvesting. Defenders should add the domain and its resolved IP to blocklists, enforce outbound DNS filtering to prevent resolution, and consider sinkholing the IP if feasible. Continuous monitoring of DNS queries for this domain and related subdomains is advised, as well as updating intrusion detection signatures to include the observed indicators. Incident response teams should treat any authentication attempts to this domain as compromised and advise users to reset credentials that may have been submitted.