bloomsnipers[.]live

This domain, bloomsnipers.live, was identified as a fraudulent crypto sniper tool designed to deceive users into connecting wallets or entering credentials. Analysis indicates the site likely promised automated token sniping or arbitrage features to lure victims, a common tactic in cryptocurrency phishing schemes. Such threats often lead to wallet drains, credential theft, or unauthorized transactions if users interact with the site. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited. It resolved to the IP address 94.183.234.240 and was hosted on an Ubuntu server running Nginx. The site was flagged by 7 out of 95 security vendors on VirusTotal, and its SSL certificate was issued by Let’s Encrypt. It appeared on at least one security blocklist before being taken offline. If you visited bloomsnipers.live or interacted with its content, immediately disconnect any connected wallets from the site. Revoke any suspicious token approvals or smart contract interactions using a blockchain explorer. Scan your device for malware, as phishing sites may deploy additional payloads. Monitor linked accounts and wallets for unauthorized activity and consider resetting passwords for any credentials entered. Report the domain to relevant security teams or threat intelligence platforms to aid in tracking and mitigation efforts.