# gopay.com.ng — SUSPICIOUS

> Warning: gopay.com.ng is flagged for phishing activity. Avoid entering personal info. The site is currently offline but caution is advised.

## Summary
PhishDestroy identifies gopay.com.ng as a domain associated with generic phishing activity, posing a low risk to users. Phishing sites like this attempt to trick visitors into providing sensitive information by mimicking legitimate services. Although the threat level is considered low, users should remain cautious when encountering unfamiliar or suspicious websites.

This phishing scheme likely impersonated a platform for purchasing airtime and data, as suggested by the page title "GopayNG - Cheapest Airtime & Data Platform." By presenting a seemingly legitimate service, the site aimed to deceive users into submitting personal or financial details. The domain was flagged on one security blocklist and detected by 2 of 95 VirusTotal security vendors before it was taken offline.

If you have visited gopay.com.ng, avoid submitting any personal information or credentials. Run a security scan on your device to ensure no malware was downloaded. It is also recommended to monitor your accounts for suspicious activity and change passwords if you suspect they were compromised. Staying vigilant helps protect against phishing threats like those identified by PhishDestroy.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: GopayNG - Cheapest Airtime & Data Platform

## Domain Intelligence
- Registered: 2026-03-04 21:07:01
- IP: 148.72.153.160
- IP Country: US
- IP City: St. Louis
- IP Org: AS30083 velia.net
- Nameservers: dns1.afeeshost.ltd dns2.afeeshost.ltd dns3.afeeshost.com
- SSL Issuer: Let's Encrypt / R13

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cba9d-b66b-7225-a205-354275ecf866.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/9656e1cb-796f-4e38-aa4f-9165bd903214
- Wayback Machine: https://web.archive.org/web/https://gopay.com.ng
- PhishDestroy: https://phishdestroy.io/domain/gopay.com.ng/
- LLM endpoint: https://phishdestroy.io/domain/gopay.com.ng/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/gopay.com.ng/
Last updated: 2026-03-19