snorter.claims

This domain is identified as a crypto drainer phishing site, designed to exploit visitors by draining cryptocurrency wallets through deceptive interactions. Users who connect wallets or authorize transactions on such sites risk immediate and irreversible asset theft, as the malicious scripts automatically transfer funds to attacker-controlled addresses without further user confirmation. The threat is particularly severe due to the irreversible nature of blockchain transactions, making recovery nearly impossible once assets are drained. Analysis indicates the domain was registered on March 27, 2026, through the registrar Nicenic, a provider frequently associated with high-risk domains. Infrastructure review reveals the site resolves to the IP address 144.31.66.249, located in Finland, and is currently offline. Detection metrics show 12 out of 95 security vendors on VirusTotal flagged the domain as malicious, while two independent blocklists, including PhishDestroy and ScamSniffer, have added it to their denylists. The SSL certificate is issued directly to snorter.claims, further confirming its role in targeted phishing operations. If you visited snorter.claims or interacted with its content, immediately disconnect any connected wallets from the site and revoke all active session permissions. Scan your device for malware using updated security tools, as phishing sites may deploy additional payloads. Monitor all linked cryptocurrency wallets for unauthorized transactions and consider transferring remaining assets to a new, secure wallet if suspicious activity is detected. Report the domain to relevant cybersecurity organizations to assist in broader mitigation efforts and prevent further victimization.