amir-freelance[.]github[.]io

Analysis indicates that the domain amir-freelance.github.io is currently listed on a security blocklist and is actively blocked by the PhishDestroy service. The domain was submitted to VirusTotal where it was examined by 91 antivirus and scanning engines; at the time of analysis none of the engines reported a detection. The absence of detections does not constitute confirmation of benign behavior, nor does it clear the domain of malicious intent.

The classification of the site as a generic phishing infrastructure derives from internal telemetry that associates the domain with credential‑harvesting campaigns. The risk level is marked as “under investigation” and the operational status is “active”, indicating that the infrastructure may still be serving malicious pages or redirecting victims. No additional metadata such as registrar information, IP address, SSL certificate details, HTTP response codes, Safe Browsing verdicts, or page title have been disclosed, leaving those aspects of the infrastructure unverified.

Defenders should treat the domain as hostile: it should be added to local and network‑level blocklists, traffic to the domain should be denied or sandboxed, and any endpoint detections that reference the domain should be escalated for further investigation. Continuous monitoring of threat‑intel feeds for updates on detection counts, blocklist changes, or additional contextual indicators is recommended to refine the risk assessment as new evidence becomes available.