snekevent[.]site

PhishDestroy identifies snekevent.site as an active fake event ticket scam domain designed to harvest payment credentials under the guise of exclusive event access. The site masquerades as a legitimate event platform but deploys a fraudulent checkout flow to steal financial and personal data. No known affiliation with real brands or drainer kit signatures was observed in the seed analysis 6a1c50, indicating an independent scam operation likely targeting casual ticket buyers.

This domain was flagged with a 0/95 detection ratio on VirusTotal as of the latest scan, suggesting low antivirus coverage despite active abuse. It resolves to IP 188.114.97.3 and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED with creation date December 17, 2023. It holds a valid Google Trust Services SSL certificate and has not been blocklisted by Google Safe Browsing (GSB status clean). No public blocklist entries were recorded, indicating a recently deployed threat.

The domain remains active and under investigation. Security teams are advised to block both the domain and associated IP to prevent user exposure. Risk remains elevated due to low detectability and recent registration, making it a high-priority threat despite current lack of blocklist coverage. Users are urged to verify event websites directly via official channels and avoid clicking unverified links.