I would like to bring a false positive to your attention coming from Xcitium Verdict Cloud.
The hostname affected is repl.co, and is currently detected as malware.
Repl.co is a domain for webserver hosting owned by Replit, a cloud-based web IDE. Users are given subdomains under repl.co for hosting web projects, however the apex domain is never used for any purpose. Based on these rules it’s appropriate to flag the individual malicious sites hosted by some abusing users and not the apex domain itself.