فحص التصيد والأمان للنطاق midnight-od.com

PhishDestroy identifies midnight-od.com as a malicious domain actively distributing a crypto drainer disguised as the Midnight Token Generation Event (TGE) platform. The site mimics legitimate cryptocurrency project pages to trick users into connecting wallets and signing malicious transactions, resulting in fund theft. The threat actor leverages urgency and familiarity with the Midnight brand to deceive visitors into authorizing unauthorized transactions, making this a high-risk impersonation attack targeting crypto investors. This domain was flagged by 9 out of 95 VirusTotal security vendors, indicating widespread detection of its malicious nature. Registered through TuringSign Inc. d/b/a Cosmotown on February 27, 2026, midnight-od.com has already been blocked by major security platforms including MetaMask and SEAL, and appears on two independent blocklists. The use of a Let’s Encrypt SSL certificate adds a false sense of legitimacy, further complicating user detection. Users who visited midnight-od.com should immediately disconnect their wallets from any connected sites, revoke any unauthorized token approvals, and scan their systems for malware. Never interact with unsolicited links or websites claiming to offer exclusive TGE access. Report any suspicious activity to your wallet provider and relevant cybersecurity teams. Stay vigilant against brand impersonation scams in the crypto space.