lightnos[.]github[.]io

lightnos.github.io has been identified as a high-risk domain engaged in social engineering tactics to steal user credentials. This domain mimics legitimate services to deceive users into submitting sensitive information such as usernames, passwords, or financial data. The threat is particularly dangerous as it leverages trust in GitHub-hosted pages to lure victims, increasing the likelihood of successful credential harvesting.

According to VirusTotal, 13 out of 95 security vendors have flagged lightnos.github.io for malicious activity, underscoring its credibility as a threat. The domain is registered through GitHub, Inc., with an SSL certificate issued by Let's Encrypt, which may falsely reassure users of its legitimacy. It currently resolves to IP address 185.199.108.153 and is actively blocked by OpenPhish. Furthermore, it appears on one security blocklist and is marked by Google Safe Browsing for social engineering risks. The domain remains active, posing an ongoing risk to internet users.

Users who have visited lightnos.github.io should immediately refrain from entering any personal or login information. If credentials were submitted, it is critical to change passwords on affected accounts without delay and enable multi-factor authentication where possible. Employing updated antivirus and anti-phishing tools can help detect and prevent further exposure. Monitoring financial statements and accounts for unauthorized activity is also advised. Prompt action can mitigate the impact of this malicious credential harvesting scheme.