snwomanclub[.]info

This domain is flagged as an active crypto drainer scam designed to deceive users of the XRP Ledger (XRPL) ecosystem. The site, titled 'SnwoMan Club — Exclusive Curated NFT Rewards on XRPL,' falsely promises exclusive NFT rewards to trick visitors into connecting their cryptocurrency wallets. Once connected, the site executes malicious scripts that drain funds from the victim’s wallet without consent, a tactic known as a crypto drainer. The threat specifically targets users familiar with XRPL, leveraging the allure of limited-time rewards to bypass caution. Analysis indicates this domain was registered on June 17, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. The site resolves to the IP address 188.114.97.3 and is currently active, despite being flagged by 1 out of 95 security vendors on VirusTotal. It also appears on one security blocklist and is blocked by at least one threat intelligence platform. The SSL certificate, issued by Google Trust Services (WE1), provides a false sense of legitimacy, as malicious actors commonly use valid certificates to evade detection. If you visited snwomanclub.info or interacted with its content, immediate action is required. Disconnect any connected wallets from the site and revoke any suspicious permissions granted to decentralized applications (dApps). Scan your device for malware using reputable security tools, as crypto drainers may deploy additional payloads. Monitor your wallet for unauthorized transactions and consider transferring remaining assets to a new, secure wallet. Report the domain to relevant threat intelligence platforms to aid in its takedown and warn other potential victims.