new-game[.]midasbuy-page[.]com

This domain, new-game.midasbuy-page.com, is identified as a credential theft operation targeting users of the PUBG MOBILE gaming platform. Analysis indicates the site was designed to harvest login credentials, likely through fraudulent in-game currency offers or account verification prompts. As of the latest verification, the domain has been taken offline, though prior activity remains a confirmed threat vector for users who may have interacted with it during its active period.

Infrastructure analysis reveals the domain was registered on October 17, 2024, through Aceville Pte. Ltd., a registrar with a history of hosting high-risk domains. It resolved to the IP address 172.67.170.201, associated with Cloudflare, Inc. (AS13335), a common proxy service used to obscure malicious infrastructure. The domain was flagged by 18 of 95 security vendors on VirusTotal, indicating moderate to high confidence in its malicious classification. Additionally, it appeared on one security blocklist, further corroborating its fraudulent nature. Notably, the domain lacked an SSL certificate, a red flag for users accustomed to secure connections on legitimate platforms.

Current status confirms the domain is offline, though residual risk persists for users who may have entered credentials or downloaded files during its active window. Organizations and individuals are advised to monitor for unauthorized access to PUBG MOBILE accounts, particularly those linked to payment methods. Network-level blocking of the domain and its associated IP (172.67.170.201) is recommended as a preventive measure. Users should verify the legitimacy of any PUBG MOBILE-related communications by accessing official channels directly, avoiding links from third-party sources. Security teams are encouraged to review logs for connections to the domain or IP to identify potential compromise.