habitvs[.]io

The domain habitvs.io has been identified as a brand impersonation threat targeting Apple, currently taken offline. This domain was designed to deceive users by mimicking Apple's branding, potentially for credential theft or other malicious purposes. The domain is now offline, but its past activity poses risks to users who may have encountered it.

According to threat intelligence, habitvs.io was flagged by 2 out of 95 VirusTotal security vendors and appears on 2 security blocklists. It was registered through Amazon Registrar, Inc. on May 26, 2023, and resolved to IP address 54.234.207.218. The SSL certificate was issued by Amazon / Amazon RSA 2048 M01, and the page title was "Habitvs - Gestão Imobiliária com IA e Automação," which did not directly reference Apple but was used in a brand impersonation campaign. The domain's trust score is low due to these indicators.

Since the domain is now offline, the immediate risk is reduced; however, users who interacted with habitvs.io should monitor for suspicious activity and change passwords if credentials were entered. PhishDestroy recommends blocking this domain and similar variants, and educating users to verify official Apple URLs before entering sensitive information. Reporting such domains to security teams and blocklist providers helps protect others from future attacks.