emersondasilva[.]github[.]io

Analysis of emersondasilva.github.io indicates that the domain is actively used for a generic phishing campaign and remains under investigation. The site is hosted via GitHub Pages, a static web‑hosting service that shares IP space with other GitHub‑hosted sites; no dedicated IP address or autonomous system information is disclosed beyond the platform’s generic infrastructure. The domain is currently listed on one public security blocklist and is explicitly blocked by the PhishDestroy service, confirming that threat‑intelligence feeds have identified it as malicious.

A VirusTotal scan performed on the domain involved 91 antivirus and sandbox engines; none of the engines reported a detection, which reflects the current lack of observable payloads rather than an indication of safety. No additional data such as Safe Browsing verdicts, Open Threat Exchange entries, SSL certificate details, HTTP response codes, or page‑title metadata have been released, leaving the content of the hosted page unverified. Defenders should treat the domain as hostile: incorporate it into URL filtering policies, add it to internal blocklists, and monitor DNS query logs for any resolution attempts.

Given the use of a legitimate hosting provider, organizations may consider broader restrictions on GitHub Pages domains when a higher risk tolerance is required. Continuous re‑evaluation is advised, as further analysis of the page content or additional detections could alter the threat posture.