gopay10[.]owxk[.]top

The domain gopay10.owxk.top poses a specific threat of brand impersonation, aiming to deceive users by mimicking the appearance and content of the legitimate manta platform. The domain was used to lure users with a misleading page title, 'Hajatan Ulang Tahun GoPay: Bagi-Bagi Saldo Rp500.000 untuk Semua Pengguna,' which translates to 'GoPay Birthday Celebration: Share Saldo Rp500,000 for All Users.' This tactic is designed to entice users to provide sensitive information or perform actions that could compromise their security.

Analysis indicates that 16 out of 95 security vendors on VirusTotal flagged this domain as malicious, highlighting its potential to cause harm. The domain was registered through Alibaba Cloud Computing Ltd. d/b/a HiChina on February 21, 2026, and has appeared on one security blocklist. Infrastructure analysis reveals that the domain resolves to the IP address 104.21.5.166, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. Notably, the domain does not possess an SSL certificate, which is a common indicator of a lack of security and potential malicious intent.

If users have visited gopay10.owxk.top, they are advised to immediately change their passwords and any other credentials that may have been compromised. Additionally, users should monitor their accounts for any unauthorized activity and consider enabling two-factor authentication for added security. It is also recommended to report the incident to the manta support team and to avoid clicking on suspicious links in the future.