gopay30[.]g31w[.]xyz

PhishDestroy has identified a phishing threat at gopay30.g31w.xyz with an elevated risk level, specifically targeting the brand Manta. This domain was designed to steal credentials or personal information from users expecting a legitimate Manta service. The page title, "Hajatan Ulang Tahun GoPay: Bagi-Bagi Saldo Rp500.000 untuk Semua Pengguna," is a classic lure promising free money to trick victims into engaging with the fraudulent page.

Technical analysis reveals that the domain was registered on February 21, 2026, through Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn), and resolves to IP address 172.67.185.192. VirusTotal flags it with 18 out of 95 security vendors marking it as malicious, and it appears on one security blocklist. No SSL certificate was found, confirming the lack of encryption and further indicating the site's illicit nature. The domain is currently offline, but its infrastructure remains a threat if reactivated.

To protect against such Manta impersonation phishing, users should never click on links promising free offers or giveaways, especially those requiring login credentials. Always verify URLs by typing the official Manta website directly into the browser and enabling two-factor authentication where possible. If any credentials were entered, change them immediately and monitor accounts for suspicious activity. Report similar domains to security teams for takedown.