klovyssantosbr[.]github[.]io

klovyssantosbr.github.io is identified as a high-risk domain engaged in credential harvesting, a form of phishing aimed at stealing user login credentials. This domain employs deceptive tactics to trick users into submitting sensitive information, putting their accounts and personal data at serious risk.

Evidence supporting this threat includes detection by 12 out of 95 security vendors on VirusTotal, indicating a strong consensus about malicious intent. The domain is hosted on GitHub Pages, resolving to IP 185.199.108.153, and uses a Let's Encrypt SSL certificate to appear legitimate. Google Safe Browsing has flagged it for social engineering, which aligns with the credential harvesting nature of this scam. Registered through GitHub, Inc., this domain remains active and continues to pose a significant danger.

Users who have visited klovyssantosbr.github.io should immediately refrain from entering any sensitive data and check their accounts for unauthorized access. It is strongly recommended to change passwords, enable two-factor authentication, and run a comprehensive malware scan. Reporting this domain to security teams and avoiding interaction with any suspicious content linked to it will help mitigate potential harm.