secure-static-site--maddykennard[.]replit[.]app

The domain secure-static-site--maddykennard.replit.app has been identified as a high-risk credential phishing site. The page title prominently displays "Sign in to your account," suggesting it aims to collect user credentials under false pretenses. As of the report date, the domain is active and serves content that could mislead users into providing sensitive information. A recent analysis shows that this domain has been flagged by 23 out of 95 security vendors on VirusTotal, indicating significant concern among cybersecurity firms regarding its legitimacy. Furthermore, it has been blocked by multiple security entities, including PhishingArmy, PhishDestroy, and OISD, reinforcing its malicious intent.

Infrastructure investigation reveals that the domain resolves to the IP address 34.117.33.233, which is hosted on Google Cloud. The technology stack includes HSTS and the use of Google Cloud Trace and CDN, indicating sophisticated infrastructure potentially aimed at evading detection. The domain was registered through Nom-IQ Limited dba Com Laude on June 24, 2026, which may complicate efforts to take down the site due to the registration entity's nature. The Gridinsoft trust score of 0 out of 100 further underscores the domain's malignancy.

In light of this data, defenders should prioritize blocking traffic to this domain across their networks. Continued monitoring of security blocklists and updates on the domain’s status is essential, as it has appeared on four different security blocklists. User education about the dangers of phishing, particularly regarding sites mimicking legitimate login pages, is critical in mitigating risk. As this domain remains active, vigilance is necessary to prevent potential credential theft.