demofortunesnake[.]com[.]br

The domain demofortunesnake.com.br is a phishing site engaged in brand impersonation targeting the cryptocurrency platform celer. It presents itself as a gaming demo titled 'Fortune Snake – Jogo do Cobra - Demo Grátis' but is designed to deceive users into disclosing sensitive information or interacting with fraudulent services. No crypto drainer kit was identified, but the site poses an elevated risk due to its impersonation of a legitimate brand. As of the latest verification, demofortunesnake.com.br has been taken offline.

Technical indicators confirm the malicious nature of demofortunesnake.com.br. The domain was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appears on 1 security blocklist (PhishDestroy). It was registered through Cloudflare, Inc. on May 31, 2025, and resolves to the IP address 188.114.97.3, hosted by Cloudflare in the US. The SSL certificate is issued by Google Trust Services (WE1), and the site utilized technologies such as WordPress, MySQL, PHP, and Cloudflare. The page title observed was 'Fortune Snake – Jogo do Cobra - Demo Grátis', and the domain’s nameservers are dana.ns.cloudflare.com and ethan.ns.cloudflare.com.

Users who interacted with demofortunesnake.com.br should immediately change any credentials entered on the site and enable two-factor authentication on their celer accounts. Monitor financial and cryptocurrency accounts for unauthorized activity, and report the incident to celer’s official support channels. Additionally, victims can submit the domain to Google Safe Browsing, PhishTank, or their local cybercrime reporting authority to aid in takedown efforts and prevent further fraud.