secure-page-builder--sabusnana[.]replit[.]app

The domain secure-page-builder--sabusnana.replit.app has been identified as a high-risk brand impersonation threat targeting Microsoft. The page title found on this domain is 'Sign in to Outlook', which directly mimics Microsoft's legitimate login portal, raising significant concerns regarding its intent to deceive users into providing sensitive information. Infrastructure analysis indicates that this domain resolves to the IP address 34.117.33.233 and has been flagged on one security blocklist, with 23 out of 95 security vendors on VirusTotal marking it as malicious. This level of detection by multiple vendors highlights a notable consensus regarding the threat posed by this domain.

The SSL certificate for this domain is issued by Google Trust Services, which typically denotes a secure connection; however, the presence of this SSL certificate does not mitigate the risk associated with the fraudulent activities being conducted on the site. The domain was registered through Replit on June 22, 2026, a platform known for allowing users to create and host applications, which can sometimes be exploited by malicious actors for phishing schemes.

Current intelligence reveals that the domain has a Gridinsoft trust score of 0/100 and has been specifically blocked by PhishDestroy, further corroborating its malicious intent. The ongoing status of the domain remains active, indicating that users may still encounter this phishing attempt. Defenders should employ proactive measures such as enhancing user education about identifying phishing attempts and implementing robust email filtering solutions to block communications that may redirect users to this domain. Given the high-risk classification, immediate action is recommended to prevent potential data breaches and to protect users from identity theft.