z-maniac-sidd[.]github[.]io

Domain z-maniac-sidd.github.io is assessed as a generic_phishing infrastructure currently active. Analysis indicates ongoing malicious use consistent with credential harvesting behavior hosted via a GitHub-based deployment. The status is confirmed active, indicating the site remains operational at time of analysis.

Telemetry indicates the domain is flagged by 12/95 VirusTotal security vendors and is explicitly marked as phishing by Google Safe Browsing. Infrastructure data shows resolution to IP 185.199.108.153, operating under AS54113 Fastly, Inc., and utilizing a Let's Encrypt / YR2 SSL certificate. Registration is through GitHub, Inc. The domain is listed by PhishDestroy and OpenPhish and appears on 2 independent security blocklists, reinforcing multi-source corroboration of malicious intent.

At present, the domain remains active and accessible, increasing the likelihood of continued phishing campaigns targeting unsuspecting users. Recommended mitigations include immediate blocking at DNS and network perimeter layers, enforcement of web filtering rules, and addition of the IP 185.199.108.153 and domain to enterprise deny-lists. Security teams should monitor for credential submission attempts and review logs for any connections to GitHub Pages-hosted phishing kits. End users should be advised to avoid interacting with the domain and to report any prompts requesting sensitive information. Continued monitoring is advised due to potential rapid re-deployment under similar GitHub-hosted infrastructure.