heroiplataformavibratoriacaseiropromocao[.]lovable[.]app

Analysis conducted on July 25, 2026 identifies the domain heroiplataformavibratoriacaseiropromocao.lovable.app as an active high-risk generic phishing threat. The domain resolves to the IP address 185.41.148.1, an infrastructure detail that may assist defenders in tracking related malicious activity. At the time of assessment, two out of ninety-one security vendors on VirusTotal have flagged this domain, indicating early but limited detection coverage. The domain also appears on one security blocklist, specifically PhishDestroy, which has classified it as malicious.

Registration details reveal the domain was registered through Lovable Labs, a registrar that has previously been associated with phishing and fraudulent domains. Nameserver information is absent (NS_NOT_FOUND), a common tactic used to obscure hosting relationships and delay takedown efforts. Despite these evasion attempts, the domain remains operational, posing an ongoing risk to users. The exact content and target of this phishing campaign are not yet confirmed, as no specific brand, page title, or scam type has been identified in available intelligence.

Defenders are advised to treat this domain as a generic phishing threat and implement blocking measures at the network and endpoint levels. Monitoring for related domains registered through Lovable Labs or resolving to 185.41.148.1 may help identify additional malicious infrastructure. Given the limited detection coverage, organizations should not rely solely on vendor signatures and should prioritize proactive threat hunting to mitigate exposure.