klimadashboard[.]xyz

PhishDestroy has flagged klimadashboard.xyz as a phishing site masquerading as a climate dashboard. The domain is designed to trick users into entering sensitive information by presenting itself as a legitimate environmental data tool, likely leveraging topical keywords to gain credibility. This type of attack is particularly dangerous because it exploits public interest in climate change to deliver malware, steal credentials, or harvest personal data under false pretenses. Users who encounter this site should avoid interacting with it entirely and report it immediately. This domain was flagged after analysis revealed alarming indicators. Klimadashboard.xyz resolved to IP address 104.21.75.89 and carries a Google Trust Services SSL certificate, which may lull visitors into a false sense of security. Critically, it has not been detected by any of the 95 VirusTotal scanners as of the latest scan, highlighting how new and evasive this threat is. The domain was registered on August 2, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with high-risk or newly created domains. These technical markers strongly suggest this is a fast-flux, short-lived phishing campaign aiming to capitalize on trending topics. If you have visited klimadashboard.xyz, disconnect from the internet immediately and run a full antivirus scan on your device. Avoid entering any personal or login information on the site. Report the domain to your cybersecurity team or through platforms like PhishDestroy, Google Safe Browsing, or your local CERT. Block the domain at your network firewall if possible to prevent further access. Stay vigilant: new phishing sites emerge daily, and even legitimate-looking domains with SSL certificates can be malicious. Monitor your accounts for unusual activity and enable two-factor authentication wherever possible to reduce risk from credential theft.