shopmidasbuy[.]officiall-events[.]com

Analysis indicates that shopmidasbuy.officiall-events.com was registered on 20 November 2025 through Aceville Pte. Ltd. and is currently hosted on the IP address 103.30.194.47. The domain is served by Cloudflare nameservers arvind.ns.cloudflare.com and jewel.ns.cloudflare.com, suggesting the use of Cloudflare's DNS and potentially its CDN or proxy services. The domain appears on a single security blocklist and is explicitly blocked by PhishDestroy, confirming that at least one anti‑phishing organization has identified it as malicious.

VirusTotal scans show that 13 of 91 security vendors have flagged the domain, providing additional independent corroboration of malicious intent. The threat type is classified as generic phishing, indicating that the site is likely used to harvest credentials or personal data, although the exact content of the landing page has not been publicly disclosed. The combination of recent registration, cloud‑based DNS, a dedicated IP address, and multiple vendor detections creates a risk profile consistent with active phishing infrastructure.

Defenders should consider adding the domain and its resolving IP address to blocklists at perimeter and endpoint layers, monitoring network traffic for outbound connections to 103.30.194.47, and reviewing any internal logs for attempted accesses. Because the domain is still active, continuous re‑evaluation is advised. Further investigation, such as retrieving the HTTP response headers, page title, and SSL certificate details, would reduce uncertainty about the exact phishing campaign and improve detection rules.