santstest[.]live

PhishDestroy identifies santstest.live as a credential theft phishing domain that impersonates the Sants brand. This domain was designed to deceive visitors into entering sensitive information, such as login credentials or personal data, under the guise of a legitimate Sants-related service. The threat is classified as generic phishing with an elevated risk level, indicating a significant potential for harm to unsuspecting users.

Evidence from intelligence sources reveals that santstest.live was registered through Name.com, Inc. on March 14, 2026, and was flagged by 9 out of 95 security vendors on VirusTotal, demonstrating widespread recognition of its malicious nature. The domain also appears on one security blocklist and currently resolves to IP address 34.111.179.208, with an SSL certificate issued by Let's Encrypt (serial E8). Its page title was found to be "Sants," further confirming the impersonation attempt. The domain has since been taken offline, but its prior activity posed a clear risk.

Users who have visited santstest.live should immediately change any passwords or credentials entered on the site and monitor their accounts for unauthorized access. It is also advisable to run a full security scan on their devices to detect any potential malware. PhishDestroy recommends avoiding interaction with unknown domains and verifying the authenticity of websites before providing personal information.