{
  "website": "*.repl.co",
  "tags": [
    "Phishing",
    "C&C",
    "Exfiltration",
    "Download"
  ],
  "service_provider": "Replit",
  "phishing": "Attackers can use *.repl.co to host their phishing websites.",
  "command_and_control": "Attackers can use a customized subdomain of repl.co as their C&C server.",
  "exfiltration": "Attackers can add upload functionalities hosted on *.repl.co and exfiltrate data on there.",
  "download": "Attackers can host their malicious tools on an external provider and then use *.repl.co to fetch the files.",
  "sample_url": "https://www.joesandbox.com/analysis/487279/0/html",
  "created": "2022-01-20",
  "last_update": "2022-01-20",
  "credits": "Anonymous",
  "detail_path": "/site/2a2e7265706c2e636f",
  "detail_slug": "2a2e7265706c2e636f",
  "detail_url": "https://lots-project.com/site/2a2e7265706c2e636f",
  "scraped_at": "2026-06-16T11:58:23Z"
}