7x4r[.]com

This domain, 7x4r.com, is identified as a credential theft operation targeting players of the online multiplayer game PUBG Mobile by falsely offering free in-game currency (PUBG UC). Analysis confirms the domain was actively used to harvest user credentials under the pretense of providing unauthorized rewards. As of the latest assessment, the domain has been taken offline, though its infrastructure remains a documented threat in security databases. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered through NameCheap, Inc. on January 18, 2026, and resolved to the IP address 34.174.25.122, hosted on a cloud provider network (AS396982). It lacks a valid SSL certificate, increasing the likelihood of unencrypted credential transmission. Security vendors flagged the domain on VirusTotal, with 19 of 95 engines detecting malicious activity. Additionally, the domain appears on one security blocklist and is explicitly labeled as phishing by threat intelligence feeds. The page title, 'Get free PUBG UC,' directly aligns with tactics used to exploit players seeking illegitimate in-game advantages. The current offline status of 7x4r.com does not eliminate the risk posed by its infrastructure or associated threat actors. Organizations and end-users are advised to block the domain and its resolved IP at the network level to prevent potential re-emergence. Users who may have interacted with the site should immediately reset credentials for PUBG Mobile and any linked accounts, enable multi-factor authentication, and monitor for unauthorized transactions. Security teams should review logs for connections to 34.174.25.122 and the domain itself, as these serve as concrete indicators of compromise. Proactive measures, including user education on recognizing fraudulent reward schemes, are recommended to mitigate future exposure.