manxvip271[.]com

The domain manxvip271.com is identified as a brand_impersonation threat specifically targeting Google. Analysis confirms the domain is currently offline, though it previously hosted content impersonating legitimate services under the guise of ManBetX, a sports betting platform. The page title, "ManBetX(万博体育)官网|英超狼队和水晶宫全球赞助伙伴," suggests an attempt to leverage the credibility of recognized sports sponsorships to deceive users, while falsely associating with Google’s brand identity. Infrastructure analysis reveals the domain was registered through Wild West Domains, LLC on February 28, 2021. It resolves to the IP address 172.65.201.65, hosted on Cloudflare’s network (AS13335). Security vendors have flagged the domain, with 18 out of 95 VirusTotal engines detecting malicious activity. The domain appears on two security blocklists, including PhishDestroy and PhishingDB. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the domain’s fraudulent nature, as threat actors frequently exploit legitimate encryption to lend false credibility. Given the domain’s offline status, immediate risk to users is reduced. However, the historical threat indicators—including the brand impersonation, blocklist presence, and detection by multiple security vendors—warrant continued vigilance. Organizations and individuals are advised to block the domain at the network level, monitor for related infrastructure (e.g., resolving IPs or associated certificates), and educate users on recognizing brand impersonation tactics. If encountered, any interaction with the domain should be treated as a security incident requiring investigation and remediation.