# PhishDestroy domain threat record: pechosnapplus.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/pechosnapplus.com/ Machine-readable companion: https://phishdestroy.io/domain/pechosnapplus.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: unknown - First observed by PhishDestroy: 2026-10-22 22:16:39 UTC - Stored record updated: 2026-10-23 00:00:42 UTC - VirusTotal detections in the stored snapshot: 1/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 193.108.130.12 - Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-07-08 12:28:27 UTC ## Evidence links - URLScan report: https://urlscan.io/result/019fa552-9457-7259-81d0-c6d1749412bb/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/pechosnapplus.com - Certificate Transparency search: https://crt.sh/?q=%25.pechosnapplus.com - Web Archive lookup: https://web.archive.org/web/*/https://pechosnapplus.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s intake AI classified the site as a high‑confidence phishing page because it pretends to offer a free Snapchat+ subscription and requests a Snapchat username together with a CAPTCHA. The recorded page title "Snap Plus Gratuit 2026 | Snapchat+ Gratuit" and the excerpt "Entre ton pseudo…" support that claim. The domain was first seen by PhishDestroy on 2026-10-23 and returned HTTP 200 at that time. How the scam works In this type of credential‑phishing scheme the attacker mimics a popular service, lures victims with a free‑upgrade promise, and collects the account identifier—often a username or email—through a form or challenge. The harvested identifiers can be used to launch password‑reset attacks, social‑engineering attempts, or to sell the data to other fraud actors. Evidence VirusTotal recorded one suspicious detection from Bfore.Ai PreCrime out of 92 engines on 2026-10-20 (retrieved 2026-10-23). Google Safe Browsing reported no threat on 2026-10-23. URLScan captured the site on 2026-07-27, gave an overall clean verdict but its engine flagged it as malicious with a high confidence score. OTX listed one pulse referencing the domain on 2026-10-23. PhishDestroy’s internal blocklist marks the domain as malicious, while external blocklists returned zero hits on the same check date. Infrastructure The domain was registered on 2026-07-08 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is hosted on IP 193.108.130.12 belonging to Webhosting Holdings LLC in the Netherlands. TLS was provided by Let’s Encrypt, valid from 2026-10-03 to 2027-01-01, and includes wildcard entries for *.pechosnapplus.com. What to do Anyone who may have entered a Snapchat username should change their Snapchat password immediately and enable two‑factor authentication. Organizations should block DNS resolution and HTTP traffic to pechosnapplus.com and monitor logs for connections to 193.108.130.12. Security teams can add the domain to their phishing blocklists and review any credential‑reuse incidents. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/019fa552-9457-7259-81d0-c6d1749412bb/ Cloudflare Radar report: https://radar.cloudflare.com/scan/b20db265-37ff-4189-ad88-c236a05ae10d Stored capture screenshot: https://urlscan.io/screenshots/019fa552-9457-7259-81d0-c6d1749412bb.png Cloudflare Radar screenshot (2026-10-22T22:17:20Z): https://screenshots.phishdestroy.io/cf/b20db265-37ff-4189-ad88-c236a05ae10d.png URLScan screenshot (2026-09-11T11:46:35Z): https://screenshots.phishdestroy.io/us/01a0904a-6624-70fb-9fb4-21e0eab9283c.png URLScan capture report: https://urlscan.io/result/01a0904a-6624-70fb-9fb4-21e0eab9283c/ URLScan screenshot (2026-09-11T16:35:10Z): https://screenshots.phishdestroy.io/us/01a09152-9a21-711c-be5b-52b6ec0c03a5.png URLScan capture report: https://urlscan.io/result/01a09152-9a21-711c-be5b-52b6ec0c03a5/ VirusTotal report: https://www.virustotal.com/gui/domain/pechosnapplus.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=pechosnapplus.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 22:47:49 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/019fa552-9457-7259-81d0-c6d1749412bb.png Captured: 2026-10-22 22:16:39 UTC - URLScan capture: https://screenshots.phishdestroy.io/019fa552-9457-7259-81d0-c6d1749412bb.png Source report: https://urlscan.io/result/019fa552-9457-7259-81d0-c6d1749412bb/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/b20db265-37ff-4189-ad88-c236a05ae10d.png Captured: 2026-10-22 22:17:20 UTC Source report: https://radar.cloudflare.com/scan/b20db265-37ff-4189-ad88-c236a05ae10d SHA-256: 9a79adabd23f1e042691c827e196a4d664c4df0a2974dd6dbd94d54b8b281cbd - URLScan · 2026-09-11: https://screenshots.phishdestroy.io/us/01a0904a-6624-70fb-9fb4-21e0eab9283c.png Captured: 2026-09-11 11:46:35 UTC Source report: https://urlscan.io/result/01a0904a-6624-70fb-9fb4-21e0eab9283c/ SHA-256: 124a5f0663a2c39505233150a314df6941a080c63ecf633fdeab4753dd22a957 - URLScan · 2026-09-11: https://screenshots.phishdestroy.io/us/01a09152-9a21-711c-be5b-52b6ec0c03a5.png Captured: 2026-09-11 16:35:10 UTC Source report: https://urlscan.io/result/01a09152-9a21-711c-be5b-52b6ec0c03a5/ SHA-256: 75a812a3a9ae8fbf420b13da421f1e72aa7581353c29c2284c1023bbebec95a1 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T22:17:34Z", "uuid": "019fa552-9457-7259-81d0-c6d1749412bb", "scanned_at": "2026-07-27T20:44:46Z", "final_url": "https://pechosnapplus.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://pechosnapplus.com/", "from": "http://pechosnapplus.com/", "status": 307 } ], "ip": "193.108.130.11", "ptr": "lu-shared01.cpanelplatform.com", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "142.251.13.94", "192.178.183.95", "193.108.130.11" ], "asns": [ "15169", "965" ], "countries": [ "US" ], "link_domains": [ "appsave.space" ], "doc_hash": "70a6b5ab29d3be50f3e0fcfdf3c1ea50ad65b2ea9b2211df91ef8332ae5b954b", "script_hashes": [ "78b46fbc44b71dacc53d9c53d3b2ef6e9611693d8cf0bf9694aed62020ad0621" ], "globals": [ "setStep", "setRingProgress", "validateUsername", "showError", "formatSubscribers", "lookupSnapchatProfile", "buildFallbackProfile", "getLookupErrorMessage", "renderProfileCard", "hideProfileCard", "sleep", "buildTaskList", "updateTask", "setupLockerButton", "openModal", "closeModal", "closeAllModals", "resetTikTokModalScroll", "initTikTokGuideTabs", "initTikTokGuideScroll", "formatAgeFrench", "getTikTokVerifyErrorMessage", "setTikTokVerifyStatus", "verifyTikTokVideoUrl", "openTikTokModal", "openTikTokConfirmModal", "closeTikTokConfirmModal", "runActivation", "makeActivationId", "animateLiveUsers", "RING_CIRCUMFERENCE", "LOCKER_URL", "state", "steps", "stepsBarFill", "stepsLabel", "usernameForm", "usernameInput", "usernameError", "loaderRing" ], "tls": { "san": [ "*.pechosnapplus.com", "pechosnapplus.com", "pechosnapplus.com.maficheclasse.fr", "www.pechosnapplus.com.maficheclasse.fr" ], "cipher": "AES_128_GCM", "issuer": "YR1", "subject": "pechosnapplus.com", "protocol": "TLS 1.3", "valid_to": "2026-10-11T12:46:46Z", "valid_from": "2026-07-13T12:46:47Z" }, "domain_age_days": 17, "apex_age_days": 17, "tls_age_days": 14, "tls_valid_days": 89, "requests": 7, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "LiteSpeed", "content-type": "text/html" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T22:17:45Z", "uuid": "b20db265-37ff-4189-ad88-c236a05ae10d", "scanned_at": "2026-10-22T22:17:20Z", "final_url": "https://pechosnapplus.com/", "status": 200, "history": [ { "url": "https://pechosnapplus.com/", "status": 200 } ], "dom_hash": "a35a7628b979da31e8fb17b60a2445ed564fa471f3f8ba9798f3dcebc53ffbf2", "doc_hash": "70a6b5ab29d3be50f3e0fcfdf3c1ea50ad65b2ea9b2211df91ef8332ae5b954b", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "pechosnapplus.com", "type": "A", "value": "193.108.130.12" }, { "name": "pechosnapplus.com", "type": "AAAA", "value": "2602:faa9:3005:723:78cc:aeb8:1a38:3afa" } ], "dnssec_valid": false, "ip": "193.108.130.12", "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-07-08T14:28:27Z", "updated": "2026-09-04T10:00:25Z", "expires": "2027-07-08T14:28:27Z", "nameservers": [ "ns1.private-nameserver.net", "ns2.private-nameserver.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T22:47:27Z", "analysis_at": "2026-10-20T12:38:45Z", "stats": { "timeout": 0, "harmless": 54, "malicious": 0, "suspicious": 1, "undetected": 37 }, "detections": { "Bfore.Ai PreCrime": "suspicious" }, "reputation": 0, "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-07-08T14:28:27Z", "expires": "2027-07-08T14:28:27Z", "updated": "2026-09-04T10:00:25Z", "first_seen": "2026-07-09T15:37:57Z", "dns": [ { "ttl": 14400, "type": "TXT", "value": "v=spf1 ip4:193.108.130.12 include:spf.mxyeet.net +a +mx ~all" }, { "ttl": 21600, "type": "NS", "value": "ns1.private-nameserver.net" }, { "ttl": 14400, "type": "MX", "value": "pechosnapplus.com", "priority": 0 }, { "ttl": 21600, "type": "SOA", "rname": "paypal.hostgnome.com", "value": "ns1.private-nameserver.net" }, { "ttl": 21600, "type": "NS", "value": "ns3.private-nameserver.net" }, { "ttl": 21600, "type": "NS", "value": "ns4.private-nameserver.net" }, { "ttl": 14400, "type": "AAAA", "value": "2602:faa9:3005:723:78cc:aeb8:1a38:3afa" }, { "ttl": 14400, "type": "A", "value": "193.108.130.12" }, { "ttl": 21600, "type": "NS", "value": "ns2.private-nameserver.net" } ], "dns_at": "2026-10-20T13:26:30Z", "jarm": "2ad2ad0002ad2ad00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae", "cert": { "san": [ "*.com.pechosnapplus.com", "*.debansnap.com", "*.pechosnapplus.com", "*.snapplus.live", "*.snapplusgratuit.net", "debansnap.com", "pechosnapplus.com", "snapplus.live", "snapplus.live.pechosnapplus.com", "snapplusgratuit.net" ], "issuer": "Let's Encrypt / YR1", "serial": "6f9e9c8c6485131c190ed1e80c6a5a87682", "sha256": "7e605f79a2743fe4c606cb6c13bbdd029bbbea66f59be19dd19f049bb9a23e64", "subject": "www.snapplusgratuit.net.pechosnapplus.com", "valid_to": "2027-01-01T04:23:45Z", "valid_from": "2026-10-03T04:23:46Z" }, "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "registrar_iana_id": "3765", "registrar_url": "https://nicenic.com", "created": "2026-07-08T14:28:27Z", "updated": "2026-07-08T14:28:27Z", "expires": "2027-07-08T14:28:27Z", "status": [ "clientDeleteProhibited", "clientTransferProhibited" ], "nameservers": [ "ns1.private-nameserver.net", "ns2.private-nameserver.net" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client delete prohibited", "client transfer prohibited" ], "events": { "expiration": "2027-07-08T14:28:27Z", "registration": "2026-07-08T14:28:27Z", "registrar expiration": "2027-07-08T14:28:27Z", "last update of RDAP database": "2026-07-08T14:28:27Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T22:18:00Z", "mail_config": { "mx": [ "pechosnapplus.com" ], "spf": "v=spf1 ip4:193.108.130.12 include:spf.mxyeet.net +a +mx ~all", "dkim": [ "default" ], "dmarc": true, "dkim_bits": 2048, "spf_lookups": 3 }, "caa_records": { "domain": "pechosnapplus.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "social_tags": { "ogUrl": "https://pechosnapplus.com/", "title": "Snap Plus Gratuit 2026 | Snapchat+ Gratuit - pechosnapplus.com", "ogType": "website", "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1", "ogImage": "https://pechosnapplus.com/og-image.jpg", "ogTitle": "Snap Plus Gratuit 2026 | Snapchat+ Gratuit", "keywords": "snap plus gratuit, snapchat+ gratuit, snapchat plus gratuit, snap+, pechosnapplus, abonnement snap plus gratuit", "ogSiteName": "pechosnapplus.com", "themeColor": "#FFFC00", "description": "Snap plus gratuit sur pechosnapplus.com : accedez a Snapchat+ gratuit rapidement avec verification et methode alternative TikTok. Offre snap plus gratuit mise a jour 2026.", "twitterCard": "summary_large_image", "canonicalUrl": "https://pechosnapplus.com/", "ogDescription": "Snap plus gratuit sur pechosnapplus.com : accedez a Snapchat+ gratuit rapidement avec verification et methode alternative TikTok." }, "trackers": { "requests": 6, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 56, "tls": 28, "wait": 22, "connect": 17, "download": 88 }, "response_ms": 211 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 25, 53, 80, 110, 143, 443, 587, 993, 995, 3306 ] }, "carbon": { "bytes": 22652, "co2_grams": 0.0008, "cleaner_than": 54 }, "dns_server": { "ns": [ { "ip": "199.195.255.66", "host": "ns3.private-nameserver.net" }, { "ip": "205.185.112.66", "host": "ns1.private-nameserver.net" }, { "ip": "209.141.39.8", "host": "ns4.private-nameserver.net" }, { "ip": "199.195.255.66", "host": "ns2.private-nameserver.net" } ], "zone": "pechosnapplus.com" }, "location": { "ip": "2602:faa9:3005:723:78cc:aeb8:1a38:3afa", "asn": "965", "org": "Webhosting Holdings LLC", "city": "Amsterdam", "country": "NL" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "www.snapplusgratuit.net.pechosnapplus.com" }, "dns": { "A": [ "193.108.130.12" ], "MX": [ "{\"exchange\": \"pechosnapplus.com\", \"priority\": 0}" ], "NS": [ "ns3.private-nameserver.net", "ns1.private-nameserver.net", "ns4.private-nameserver.net", "ns2.private-nameserver.net" ], "SOA": "{\"nsname\": \"ns1.private-nameserver.net\", \"hostmaster\": \"paypal.hostgnome.com\", \"serial\": 2026102206, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}", "TXT": [ "v=spf1 ip4:193.108.130.12 include:spf.mxyeet.net +a +mx ~all" ], "AAAA": [ "2602:faa9:3005:723:78cc:aeb8:1a38:3afa" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "2602:faa9:3005:723:78cc:aeb8:1a38:3afa", "family": 6 }, "redirects": { "chain": [ "https://pechosnapplus.com" ] }, "subdomains": { "count": 24, "subdomains": [ "chopetaclasse.com.pechosnapplus.com", "choppetaclasse.com.pechosnapplus.com", "com.pechosnapplus.com", "debansnap.com.pechosnapplus.com", "mafutureclasse.com.pechosnapplus.com", "snapplus.live.pechosnapplus.com", "snapplusgratuit.net.pechosnapplus.com", "www.chopetaclasse.com.pechosnapplus.com", "www.choppetaclasse.com.pechosnapplus.com", "www.debansnap.com.pechosnapplus.com", "www.mafutureclasse.com.pechosnapplus.com", "www.manouvelleclasse.com.pechosnapplus.com", "www.mapromoetudiante.com.pechosnapplus.com", "www.marentreeapple.com.pechosnapplus.com", "www.monsnapplus.com.pechosnapplus.com", "www.point-bk.com.pechosnapplus.com", "www.points-bk.com.pechosnapplus.com", "www.rentree2026.com.pechosnapplus.com", "www.snapdeban.com.pechosnapplus.com", "www.snapdebanx.com.pechosnapplus.com", "www.snapplus.live.pechosnapplus.com", "www.snapplusgratuit.net.pechosnapplus.com", "www.trackmysnap.com.pechosnapplus.com", "www.voirtaclasse.com.pechosnapplus.com" ] }, "tech_stack": { "technologies": [ "YouTube", "LiteSpeed", "Google Font API", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 2 }, "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-07-08T14:28:27Z", "updated": "2026-09-04T10:00:25Z", "expires": "2027-07-08T14:28:27Z", "status": [ "clientDeleteProhibited https://icann.org/epp", "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.private-nameserver.net", "ns2.private-nameserver.net" ] }, "headers": { "headers": { "server": "LiteSpeed", "content-type": "text/html" } } } } ```