midnight-now[.]com

This domain, midnight-now.com, poses a high-risk phishing threat targeting cryptocurrency users through a fraudulent token generation event (TGE). The site mimics legitimate blockchain project launches to deceive visitors into connecting wallets or transferring funds under false pretenses. Analysis of the page title, 'Midnight TGE | Home,' confirms its focus on luring victims with promises of early token access or investment opportunities, a common tactic in cryptocurrency scams. Infrastructure analysis reveals multiple red flags. The domain was registered on February 21, 2026, an unusually future date indicating potential domain spoofing or incorrect WHOIS records. It is flagged by 17 out of 95 security vendors on VirusTotal, with detections from three independent blocklists, including specialized cryptocurrency threat feeds. The domain resolves to IP address 86.107.77.57, hosted on AS216395 (HostBet Cloud Technologies Private Limited) in Germany, a network frequently associated with malicious activity. The SSL certificate, issued under the R12 root, lacks extended validation, further reducing trustworthiness. Users who visited midnight-now.com should take immediate action to mitigate risk. Disconnect any wallets linked to the site and revoke smart contract approvals via blockchain explorers. Scan local devices for malware, as phishing pages may deploy malicious scripts. Monitor financial accounts and cryptocurrency wallets for unauthorized transactions. Report the domain to relevant security teams or threat intelligence platforms to aid in broader mitigation efforts. If funds were transferred, contact the receiving exchange or wallet provider with transaction hashes to attempt recovery.