mobashops[.]merchantevent[.]com

The domain mobashops.merchantevent.com poses an elevated risk of brand impersonation. Analysis indicates that the domain was designed to mimic the legitimate Codashop website, potentially misleading users into believing they are interacting with a trusted service. This could result in financial loss or the compromise of personal information.

Infrastructure analysis reveals that the domain was created on February 21, 2026, and is currently hosted on an IP address (188.114.96.3) located in the United States, specifically under the AS13335 Cloudflare, Inc. network. The domain has been flagged by 19 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion. The SSL certificate for the domain is WE1, which could be used to instill a false sense of security in unsuspecting users. Additionally, the domain appears on one known security blocklist and is blocked by the PhishDestroy service. These indicators, combined with the domain's creation date and hosting infrastructure, suggest a targeted and sophisticated phishing operation.

To mitigate the risks associated with brand impersonation, it is recommended to educate users about the importance of verifying the legitimacy of websites before making any transactions. Users should be instructed to look for official URLs and to avoid clicking on links from unverified sources. Security teams should monitor for similar domain registrations and block access to known malicious sites. Furthermore, implementing DNS-based protection and using advanced threat intelligence services can help in early detection and prevention of such attacks.