emilywilson[.]site

The domain emilywilson.site is suspected of being a generic phishing site and is currently active. There is a high risk level associated with this domain, which appears to impersonate an investor or cryptocurrency brand. The domain is registered through Registrar of Domain Names REG.RU LLC and resolves to the IP address 37.140.192.161. The SSL certificate for the domain is issued by Let's Encrypt, a common certificate authority used by both legitimate and malicious sites.

This domain has been flagged by 1 of 95 VirusTotal vendors, indicating a potential threat. The domain was created on April 29, 2026, which is relatively recent and can be a sign of a new phishing campaign. The IP address 37.140.192.161 is hosted in a location that has been associated with other malicious activities. The use of a trusted SSL certificate from Let's Encrypt can make the site appear legitimate, potentially increasing the success rate of the phishing attempt. The minimal blocklist count and low trust scores further suggest that the domain is under scrutiny but not yet widely recognized as malicious.

Given the current status and the specific threat indicators, it is recommended that users exercise extreme caution when interacting with emilywilson.site. Security teams should consider adding this domain to their blocklists and monitoring for any related malicious activity. Additionally, conducting further investigation, such as DNS and WHOIS lookups, can provide more insights into the domain's infrastructure and potential connections to known threat actors.