midas-on[.]event-zones[.]com

This domain is identified as a credential harvesting scam designed to deceive users into submitting sensitive login information. Analysis indicates the infrastructure mimics trusted platforms, likely targeting corporate or financial service credentials through fraudulent login portals. The domain employs social engineering tactics, such as urgency or fake alerts, to manipulate victims into disclosing account details without verification. Infrastructure analysis reveals the domain was registered on February 26, 2026, an unusually future-dated creation that may indicate an attempt to evade detection or expiration-based scrutiny. It resolves to the IP address 188.114.96.3, hosted on Cloudflare infrastructure (AS13335), a common obfuscation technique used by malicious actors. VirusTotal reports 21 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The SSL certificate, labeled WE1, provides no additional trust indicators, further confirming its illegitimate nature. Users who visited midas-on.event-zones.com should immediately revoke any entered credentials, particularly for financial or corporate accounts. Reset passwords using a separate, trusted device and enable multi-factor authentication where available. Monitor associated accounts for unauthorized activity, such as logins from unfamiliar locations or devices. If payment details were submitted, contact financial institutions to flag potential fraud. Network administrators should block the domain and its resolving IP (188.114.96.3) at the perimeter to prevent further exposure.