snortertaken[.]mom

The domain snortertaken.mom was registered on October 28, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently listed as offline. DNS resolution points to the IP address 104.21.47.45, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The domain uses Cloudflare’s authoritative nameservers natasha.ns.cloudflare.com and uriah.ns.cloudflare.com, but it does not present an SSL/TLS certificate, leaving the HTTP channel unencrypted. Gridinsoft assigns a trust score of 0 out of 100, indicating a lack of reputation. The page title returned by the site is "Success!", but no further content analysis is available.

Security telemetry shows that two of ninety‑five VirusTotal scanners flagged the domain, and it appears on two external blocklists. Independent blocklist providers PhishDestroy and ScamSniffer have already added the domain to their deny lists. The threat classification is recorded as generic phishing with an elevated risk level. Defenders should treat the domain as hostile infrastructure and enforce blocking at the DNS or proxy layer, especially for any outbound connections to the associated Cloudflare IP.

Because the site lacks TLS, any attempted communication would be exposed in clear text, simplifying detection through network monitoring. Continuous monitoring of the IP 104.21.47.45 for new hostnames is advised, as Cloudflare often hosts multiple malicious actors under shared infrastructure. Organizations should also verify that internal URL filtering solutions include the two known blocklists to ensure consistent coverage. Given the low trust score, absence of encryption, and presence on multiple security feeds, the domain should be considered a high‑confidence indicator of compromise and incorporated into threat‑intel feeds for proactive defense.