battleground-midas[.]topup-mobiles[.]com

Analysis of battleground-midas.topup-mobiles.com shows a newly registered domain (creation date May 14, 2026) that is actively serving a generic phishing campaign targeting users of the PUBG Mobile UC service, as indicated by the page title "PUBG Mobile UC Việt Nam | Midasbuy." The domain is registered through Aceville Pte. Ltd. and resolves to the Cloudflare‑hosted IP address 188.114.97.3, which is geolocated to Canada. DNS resolution uses the Cloudflare nameservers june.ns.cloudflare.com and maxim.ns.cloudflare.com, and the site presents a TLS certificate issued by Google Trust Services under the WE1 root, confirming a valid HTTPS endpoint. HTTP requests return a 403 status code, suggesting that the content is being blocked or restricted, yet the domain remains listed as active. Reputation data shows the domain is blocked by PhishDestroy, appears on one external security blocklist, and has been flagged by 19 of 92 security vendors on VirusTotal. The Gridinsoft trust score is 0 out of 100, reinforcing the malicious assessment. While the exact page content has not been captured, the combination of registration timing, targeted page title, Cloudflare infrastructure, and multiple vendor detections supports a high‑risk classification. Defenders should add the domain to network deny lists, monitor DNS queries for the 188.114.97.3 address, and enforce URL filtering policies that block access to this host. Continuous re‑evaluation is advised in case the site changes status or additional indicators emerge.