gmgnsnipertool[.]life
“GMGN SniperMark - Your Unfair Advantage on gmgn.ai”
gmgnsnipertool.life — No verificado. Resumen de las pruebas: VirusTotal 2/93 (Fortinet, SOCRadar); Spamhaus DBL_SPAM; PhishDestroy score 71/100. Registrador: NiceNIC.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
The domain gmgnsnipertool.life is a generic phishing site designed to deceive users into disclosing sensitive information or credentials. It does not impersonate a specific brand but uses the name 'GMGN SniperMark' to mimic legitimate services, potentially targeting users of cryptocurrency or trading platforms. As of the latest verification, gmgnsnipertool.life has been taken offline, but its prior activity poses an elevated risk to those who may have interacted with it.
Technical analysis shows that gmgnsnipertool.life was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and SOCRadar. The domain was registered through NiceNIC International Group Co., Limited on February 21, 2026, and resolved to the IP address 94.183.234.240, hosted on an Ubuntu server running Nginx. It appears on 1 security blocklist, specifically PhishDestroy, and used an SSL certificate issued by Let's Encrypt (E7). The observed page title was 'GMGN SniperMark - Your Unfair Advantage on gmgn.ai', which may have been used to lend credibility to the phishing attempt.
Users who visited gmgnsnipertool.life should immediately change any passwords or credentials that may have been entered on the site. Enable two-factor authentication (2FA) on all accounts as an additional security measure. Monitor financial and cryptocurrency accounts for unauthorized activity, and consider revoking any token approvals if cryptocurrency wallets were connected. Report the domain to relevant authorities or platforms, such as Google Safe Browsing, anti-phishing organizations, or the registrar (NiceNIC International Group Co., Limited), to aid in further takedown efforts.
Inteligencia de seguridad de red Registrar context
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-16 02:42:25 UTC
Análisis de VirusTotal
Evidencias archivadas
Datos y informes externos
PD-20260214-11F505 Recipient: abuse@cloudbackbone.net ¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.