pubg-kr[.]mujica[.]cyou

The site pubg-kr.mujica.cyou presented itself as "PUBG MOBILE EVENT," indicating a fraudulent promotion impersonating the PUBG Mobile brand. The primary threat is phishing or credential theft, where visitors may be tricked into providing login credentials or personal data under the guise of an in-game event.

Technical evidence shows the domain was flagged by 12 of 95 VirusTotal vendors, including ADMINUSLabs, BitDefender, Chong Lua Dao, Cluster25, and CRDF. The domain was created on 2026-02-21, registered with IP 45.207.204.6, hosted in the United States under AS8796 FASTNET DATA INC. It used an R13 SSL certificate and had a DOM risk score of 73, with a GridinSoft trust rating of 0 out of 100.

As of the latest check, the site is offline or down. The high risk score of 73, combined with multiple vendor detections and zero trust rating, indicates a significant threat if the site were active. Users who interacted with it during its operation should assume compromise and take appropriate security measures.