gmgn-sniper[.]guru

The domain gmgn-sniper.guru was a generic phishing site posing no direct impersonation of a known brand or use of a crypto drainer kit. It presented itself as 'GMGN SniperMark - Your Unfair Advantage on gmgn.ai', targeting users with fraudulent login or credential harvesting schemes. As of the latest verification, gmgn-sniper.guru has been taken offline, though its prior activity classified it as an elevated-risk phishing threat.

Technical analysis of gmgn-sniper.guru revealed limited but notable detection: 2 of 95 VirusTotal security vendors, including Fortinet and SOCRadar, flagged the domain. It was registered through NiceNIC International Group Co., Limited on February 21, 2026, and resolved to the IP address 94.183.234.240, hosted on an Ubuntu server running Nginx. The SSL certificate was issued by Let's Encrypt (E8), and the domain appeared on one security blocklist, PhishDestroy. Google Safe Browsing did not flag the site at the time of assessment. Nameservers were ns3.my-ndns.com and ns4.my-ndns.com, with the IP geolocated to Finland under AS56971 Cloud.

Individuals who interacted with gmgn-sniper.guru should immediately change any credentials entered on the site, particularly if reused across other platforms. Enable multi-factor authentication (2FA) on all accounts as an additional safeguard. Monitor financial and login activity for unauthorized access or transactions. Report the phishing domain to local cybersecurity authorities, your email provider, or platforms like Google Safe Browsing or PhishTank to assist in broader threat mitigation.