demo[.]billmanthra[.]com

The domain demo.billmanthra.com has been identified as a generic phishing site with a high risk level and is currently active. The site impersonates a login page, typically designed to capture user credentials or other sensitive information. No specific brand impersonation has been identified, but the presence of a login page and the domain's recent creation suggest a targeted approach.

Analysis indicates that the domain demo.billmanthra.com was created on June 08, 2026, and is registered through One.com A/S. The domain resolves to the IP address 162.55.110.17 and is secured with an SSL certificate issued by Let's Encrypt (R12). The domain has been flagged by 2 out of 95 security vendors on VirusTotal, indicating a low but notable level of suspicion. Additionally, the domain appears on 1 security blocklist, specifically PhishDestroy, further supporting the assessment of its malicious nature.

The current status of demo.billmanthra.com is active, and it remains accessible on the internet. Given the domain's known involvement in phishing activities and its presence on a security blocklist, it is recommended that network administrators block access to this domain to prevent potential credential theft. Users should avoid interacting with this site and report any suspicious activity to their IT support teams. Continuous monitoring of the domain and associated infrastructure is advised to detect any changes in threat behavior.