gopay23[.]ckbe[.]top

The domain gopay23.ckbe.top poses a significant threat as it is involved in brand impersonation, specifically targeting the 'Manta' brand. By mimicking legitimate brand communications, it attempts to deceive users into believing they are interacting with a trusted service. The lure involves a fake promotion, 'Hajatan Ulang Tahun GoPay: Bagi-Bagi Saldo Rp500.000 untuk Semua Pengguna', which could lead users to disclose sensitive information under the guise of winning a prize.

Evidence of this threat stems from several key technical indicators. VirusTotal's analysis shows that 16 out of 95 security vendors flagged this domain as malicious. The domain was registered through 阿里云计算有限公司, and its creation date is listed as February 21, 2026, which may indicate pre-emptive registration for future malicious campaigns. Additionally, this domain lacks an SSL certificate, further indicating its illegitimacy. The domain resolves to an IP address located in the United States, managed by Cloudflare, Inc., but has since been taken offline and is currently blocked by at least one security blocklist, namely PhishDestroy.

If you have visited this domain, it is critical to take immediate action to protect your information. Start by running a comprehensive antivirus scan on your device to ensure no malware has been installed. Change any passwords that might have been compromised, particularly if you entered them on the site. Be vigilant for any unusual activity on your accounts and consider enabling two-factor authentication for an additional layer of security. Reporting the incident to your organization's IT department or a relevant cybersecurity body can also help mitigate further risks.