gopay73[.]vnyn[.]top

This domain, gopay73.vnyn.top, poses a brand impersonation threat targeting users of the Manta platform by masquerading as an official GoPay promotion. The site displays a fraudulent page titled 'Hajatan Ulang Tahun GoPay: Bagi-Bagi Saldo Rp500.000 untuk Semua Pengguna,' luring victims with the promise of a 500,000 Indonesian Rupiah balance reward. Such tactics are designed to harvest login credentials, payment details, or personal information under the guise of a legitimate financial incentive. Analysis indicates the domain was registered on February 21, 2026, through Alibaba Cloud Computing Ltd. (HiChina), a registrar frequently associated with malicious infrastructure. Despite its recent creation date, the domain has already been flagged by 19 out of 95 security vendors on VirusTotal, confirming its classification as phishing. Infrastructure analysis reveals the site resolves to the IP address 172.67.192.33, hosted on Cloudflare’s network (AS13335), which is commonly used to obscure the true origin of malicious domains. Additionally, the domain appears on one security blocklist and lacks an SSL certificate, further reducing its legitimacy. Users who visited gopay73.vnyn.top should take immediate action to mitigate potential risks. If any credentials or payment details were entered, reset passwords for all associated accounts, particularly those linked to Manta or GoPay, and enable multi-factor authentication where available. Monitor financial statements for unauthorized transactions and report any suspicious activity to the relevant financial institution. Avoid interacting with any communications or links originating from this domain, and consider scanning the device used to access the site for malware. Given the domain’s current offline status, users should remain vigilant for similar phishing attempts using comparable tactics or infrastructure.