pubgevent[.]specialfors[.]com

PhishDestroy identifies pubgevent.specialfors.com as an active credential-theft domain posing as a PUBG MOBILE EVENT lure. The page title reinforces the impersonation, while the SSL certificate issued by Google Trust Services lends a false veneer of legitimacy. This domain was flagged by 16 of 95 VirusTotal scanners, indicating widespread suspicion among security vendors. This domain resolves to IP 172.67.204.63 and is registered through Aceville Pte. Ltd. with a creation date of January 23, 2026. Despite the recent registration, the domain has already been detected by multiple threat intelligence feeds, reflecting rapid uptake in malicious campaigns. The presence of a valid SSL certificate from a trusted issuer may deceive users into assuming safety, but the low trust score and high VT detection ratio contradict this perception. Mitigation for credential-theft domains like pubgevent.specialfors.com requires immediate avoidance of any data entry, including usernames, passwords, or payment details. Users should report the domain to their security teams or via threat-sharing platforms such as PhishDestroy or VirusTotal. Organizations are advised to block the domain at DNS and firewall levels using the IP and domain indicators provided. Always verify event URLs through official PUBG Mobile channels before interacting.