ultrafima[.]com

This domain, ultrafima.com, is identified as a confirmed brand impersonation site specifically targeting users of the Celer Network, a blockchain interoperability protocol. The site mimics legitimate Celer Network branding to deceive visitors into disclosing sensitive credentials, such as wallet private keys or login details, under the guise of a purported service or promotion. The fraudulent nature of this operation is underscored by its intent to exploit trust in the Celer brand for financial or data theft purposes. Analysis indicates that ultrafima.com was registered on September 07, 2019, through GoDaddy.com, LLC, a widely used domain registrar. The domain resolves to the IP address 68.178.220.176, which is hosted within the autonomous system AS26496, operated by the same registrar. At the time of assessment, the domain appeared on 2 distinct security blocklists and was flagged by 18 out of 95 security vendors on VirusTotal, reflecting a consensus among multiple detection engines regarding its malicious nature. The SSL certificate issued to the domain is provided by Let's Encrypt, a common practice among both legitimate and malicious sites to enable HTTPS encryption. Users who have visited ultrafima.com are advised to take immediate remedial actions to mitigate potential risks. Any credentials or sensitive information entered on the site should be considered compromised and must be revoked or changed without delay. Affected individuals should monitor their accounts for unauthorized transactions or activity and enable multi-factor authentication where available. Additionally, system scans using updated security tools are recommended to detect any secondary infections or malware that may have been introduced during the visit. Given the domain's current offline status, users should remain vigilant for similar impersonation attempts targeting Celer Network or other blockchain-related services.