ugarexgroup[.]com

This domain, ugarexgroup.com, poses a specific threat of brand impersonation by mimicking the appearance and functionality of the legitimate Binance platform. The purpose of this impersonation is to deceive users into providing sensitive information such as login credentials, personal data, or financial details, which can be used for fraudulent activities.

Analysis indicates that ugarexgroup.com was created on October 22, 2022, and is registered through GoDaddy.com, LLC. The domain resolves to the IP address 172.67.161.29, which is located in the United States and is associated with Cloudflare, Inc. (AS13335). According to VirusTotal, 9 out of 95 security vendors have flagged this domain as malicious, and it appears on 1 security blocklist. The domain has been taken offline, but its SSL certificate was issued by Google Trust Services / WE1, which may have initially lent it a false sense of legitimacy.

If users have visited ugarexgroup.com, they should immediately check their Binance accounts for any unauthorized activity. It is recommended to change passwords and enable multi-factor authentication (MFA) on all relevant accounts. Users should also monitor their financial statements for any suspicious transactions and report any findings to their financial institutions and Binance support. Additionally, users should be cautious of similar domains and verify the URL before entering any sensitive information.