adilsonribeiroalmeida[.]github[.]io

Analysis of the domain adilsonribeiroalmeida.github.io, observed on July 29, 2026, indicates active malicious use consistent with a generic phishing campaign. The domain resolves to the IP address 185.199.108.153, which belongs to the GitHub Pages hosting service, confirming that the site is served from GitHub's infrastructure. Registration metadata shows the domain was provisioned through GitHub, Inc., a legitimate registrar that provides subdomains for user‑generated content.

Despite the benign hosting environment, the domain appears on one security blocklist and is specifically listed as blocked by PhishDestroy, a service that curates known phishing infrastructure. VirusTotal reports that 15 of 91 scanned security vendors have flagged the domain as malicious, providing independent confirmation of suspicious activity. The nameserver query returned NS_NOT_FOUND, suggesting that standard DNS delegation records are not publicly visible, which can hinder passive reconnaissance.

No additional intelligence such as SSL certificate details, HTTP response codes, page titles, or content analysis is currently available, leaving the exact phishing payload and targeted brand unconfirmed. Defenders should treat the domain as high‑risk: implement DNS‑level blocking for adilsonribeiroalmeida.github.io, incorporate it into web‑filtering rules, and monitor outbound connections to the associated IP address for potential data exfiltration. Continuous re‑evaluation is advised, as further analysis of the hosted page could reveal additional indicators of compromise or victim targeting.