matanga24[.]icu

This domain, matanga24.icu, is currently under investigation for generic phishing activity targeting users of the MATANGA delivery service. The page title, displayed in Cyrillic, translates to 'MATANGA — quality and safety for everyone, forward,' suggesting an attempt to impersonate the legitimate MATANGA brand. No specific phishing kit or crypto drainer signatures have been identified at this stage, but the domain exhibits characteristics consistent with brand impersonation for credential harvesting or fraudulent transactions.

Technical indicators reveal the following: the domain resolves to IP address 188.114.96.3 and was registered on June 19, 2024, through NICENIC INTERNATIONAL GROUP CO., LIMITED. VirusTotal reports 0 detections out of 95 engines, indicating no current flagging by major security vendors. The domain appears on one security blocklist, though it is not yet listed in Google Safe Browsing. The creation date suggests recent deployment, aligning with typical phishing campaign timelines.

As of the latest assessment, matanga24.icu remains active and accessible. No takedown actions have been observed, and the domain continues to resolve to its assigned IP. Users are advised to exercise caution, particularly if prompted for login credentials, payment details, or personal information. Organizations should monitor for related infrastructure, including newly registered domains under the same registrar or resolving to the same IP, as these may indicate broader campaign activity. The lack of detections on VirusTotal does not preclude malicious intent, and further monitoring is recommended.