sniptourl[.]com

PhishDestroy identifies sniptourl.com as an active crypto drainer phishing domain with an elevated risk level.

This domain was flagged by 1 out of 95 VirusTotal security vendors and registered on February 12, 2026 through TUCOWS.COM, CO. It resolves to IP 172.67.141.66 and holds a valid SSL certificate issued by Google Trust Services. Despite low detection counts, the domain’s recent creation and association with a known hosting infrastructure warrant heightened scrutiny for crypto-related fraud.

Crypto drainer domains typically mimic legitimate services to trick users into connecting wallets and authorizing malicious transactions. sniptourl.com’s minimal VirusTotal detection (1/95) and absence from major blocklists suggest either a new campaign or evasion techniques. Users should avoid interacting with this domain for any crypto transactions, verify links via independent sources, and use wallet and browser extension safeguards such as transaction simulation tools and phishing domain blocklists. Organizations should flag sniptourl.com at the network perimeter and update endpoint detection rules to monitor for connections to 172.67.141.66.