gsantos-ob[.]github[.]io

The domain gsantos-ob.github.io is identified as a generic phishing site with a high risk level and is currently active. Analysis indicates that this domain does not impersonate a specific brand but is used for general phishing activities.

Infrastructure analysis reveals that gsantos-ob.github.io is registered through GitHub Pages and resolves to the IP address 185.199.110.153. The domain is flagged by 7 out of 95 security vendors on VirusTotal, suggesting a moderate level of detection by automated systems. The SSL certificate is issued by Let's Encrypt, which is a common certificate authority for legitimate and malicious sites alike. The domain appears on one security blocklist, further indicating its involvement in malicious activities. The page title 'Site not found · GitHub Pages' suggests that the site may have been taken down or is intentionally designed to appear inactive.

Given the current active status of gsantos-ob.github.io, it is recommended that users avoid accessing this domain and report any suspicious activity to their security teams. Network administrators should consider blocking this domain to prevent potential phishing attacks. Additional monitoring and threat intelligence updates are advised to stay informed about any changes in the domain's activity or risk level.