advpedroza[.]lovable[.]app

This domain, advpedroza.lovable.app, is flagged as a generic phishing infrastructure targeting users through credential harvesting tactics. The page title, 'Website Takedown Notice - Lovable Trust,' suggests an attempt to impersonate a trust or security authority, likely to deceive victims into submitting sensitive login credentials or personal information. No specific brand or drainer kit signatures were identified in the available data, but the use of a fabricated trust notice aligns with common phishing social engineering techniques. Analysis indicates the domain was registered on March 9, 2026, through Cloudflare, Inc., and resolves to the IP address 185.41.148.2. It is secured with an SSL certificate issued by Google Trust Services and employs HSTS alongside Cloudflare’s CDN infrastructure. Security vendor detections on VirusTotal stand at 14 out of 95, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist, specifically PhishDestroy, and is not currently listed in Google Safe Browsing databases. As of the latest assessment, advpedroza.lovable.app has been taken offline, likely following abuse reports or automated takedown procedures. Despite its inactive status, residual risk remains due to the potential for the infrastructure to be reactivated or repurposed. Users who may have interacted with the domain are advised to reset credentials for any accounts accessed during the exposure window. Organizations should monitor for related indicators, including the IP address 185.41.148.2 and the Cloudflare-hosted subdomain pattern, to preemptively block similar threats.