sg-groupe[.]com

PhishDestroy identifies sg-groupe.com as an active brand impersonation crypto drainer campaign under live investigation. The domain mimics the legitimate SG Groupe, a European financial services brand, aiming to trick users into connecting wallets and draining crypto assets via counterfeit web interfaces. Current forensic artifacts suggest the operators are currently deploying drainer toolkits leveraging fake deposit pages and social engineering prompts targeting B2B finance professionals.

Domain technical indicators confirm high-risk attributes: VirusTotal detection score is 0/95, indicating zero antivirus engines flag the payload at present. The domain resolves to IP 91.84.97.33 and is served over Let’s Encrypt SSL (valid since domain creation). Registrar is NAMECHEAP INC, with domain creation date of March 17, 2025. Google Safe Browsing (GSB) status remains unlisted, and no public blocklist entries are yet recorded. The combination of new TLD registration, low VT score, and active infrastructure points to early-stage deployment by opportunistic threat actors.

This domain remains under active investigation with status labeled 'active' and risk level 'under_investigation'. Immediate remediation is advised: block sg-groupe.com at DNS, firewall, and proxy layers. Users should avoid visiting the site and verify any financial communication via official channels. Remaining risk is assessed as high due to active hosting, SSL coverage, and undetected malicious payloads—urgent action is required to prevent asset loss.