# PhishDestroy domain threat record: snaptubeoficial.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/snaptubeoficial.com/
Machine-readable companion: https://phishdestroy.io/domain/snaptubeoficial.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 16:59:34 UTC
- Last availability or vendor check: 2026-10-26 00:19:41 UTC
- Stored record updated: 2026-10-26 00:19:41 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: ups

## Stored infrastructure

- Observed IP address: 43.169.50.100
- Registrar in stored WHOIS data: GoDaddy.com, LLC
- Last stored HTTP status: 301
- Registration date in stored WHOIS data: 2026-07-27 07:08:56 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a173ff-d7c8-73a3-a8db-6ff1f4cf1d92/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/snaptubeoficial.com
- Certificate Transparency search: https://crt.sh/?q=%25.snaptubeoficial.com
- Web Archive lookup: https://web.archive.org/web/*/https://snaptubeoficial.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s intake AI classified the domain as malicious because it pretends to be the official Snaptube app and offers an APK download outside official stores. The recorded page title reads “Snaptube oficial: baixe a versão verdadeira com segurança” and the excerpt claims the app is not on Google Play. The domain was first seen by PhishDestroy on 2026-10-25 and returned an HTTP 301 redirect to the www subdomain. The internal PhishDestroy blocklist marks the site as malicious.

How the scam works
Impostor sites copy the branding of popular applications and claim to host the “true” version for direct download. By stating that the official app is unavailable on legitimate stores, they persuade users to sideload a supplied APK, which may contain malware or unwanted software. This technique relies on brand trust and the convenience of bypassing official app marketplaces.

Evidence
VirusTotal scanned the domain on 2026-10-15 and reported 0 malicious detections out of 92 engines. Google Safe Browsing checked on 2026-10-25 and did not flag the site. OTX listed three pulses referencing the domain as of 2026-10-25. URLScan captured the page on 2026-10-25; its engine analysis assigned a malicious score of 42 and tagged it with URLScan‑ML indicators, while the overall verdict was not malicious. PhishDestroy’s internal blocklist marks the domain as malicious and external blocklists showed no entries on the check date.

Infrastructure
The domain was registered on 2026-07-27 through GoDaddy.com, LLC, with nameservers vip7.alidns.com and vip8.alidns.com. DNS records observed on 2026-10-25 included a CNAME to snaptubeoficial.com.eo.dnse3.com and an A record pointing to 43.169.50.100. The TLS certificate, issued by TrustAsia DV TLS RSA CA 2025, covered www.snaptubeoficial.com and was valid from 2026-08-14 to 2026-11-11.

What to do
Users should avoid downloading any APK from this site and obtain Snaptube only from official app stores. Organizations should block the domain and review access logs for any attempted downloads or connections. Password changes are only necessary if credentials were entered on the site.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a173ff-d7c8-73a3-a8db-6ff1f4cf1d92/
Cloudflare Radar report: https://radar.cloudflare.com/scan/b66737a2-35cf-4115-8195-a553526840a8
Stored capture screenshot: https://i.ibb.co/b5hGTHFS/066d42627e28.png
Cloudflare Radar screenshot (2026-10-25T17:33:11Z): https://screenshots.phishdestroy.io/cf/b66737a2-35cf-4115-8195-a553526840a8.png
URLScan screenshot (2026-10-25T16:47:21Z): https://screenshots.phishdestroy.io/us/01a173f5-88d1-76db-98a2-21d211fb8b0d.png
URLScan capture report: https://urlscan.io/result/01a173f5-88d1-76db-98a2-21d211fb8b0d/
URLScan screenshot (2026-10-25T16:52:34Z): https://screenshots.phishdestroy.io/us/01a173fa-48c6-717b-85bc-af796d94aaf3.png
URLScan capture report: https://urlscan.io/result/01a173fa-48c6-717b-85bc-af796d94aaf3/
VirusTotal report: https://www.virustotal.com/gui/domain/snaptubeoficial.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=snaptubeoficial.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 17:34:57 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/b5hGTHFS/066d42627e28.png
  Captured: 2026-10-25 16:59:34 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a173ff-d7c8-73a3-a8db-6ff1f4cf1d92.png
  Captured: 2026-10-25 16:59:34 UTC
  Source report: https://urlscan.io/result/01a173ff-d7c8-73a3-a8db-6ff1f4cf1d92/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/b66737a2-35cf-4115-8195-a553526840a8.png
  Captured: 2026-10-25 17:33:11 UTC
  Source report: https://radar.cloudflare.com/scan/b66737a2-35cf-4115-8195-a553526840a8
  SHA-256: c2174c6add517f823025f6f6fe952ab55c5a1dfd51ca7b00a133b6d33ee9797f
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a173f5-88d1-76db-98a2-21d211fb8b0d.png
  Captured: 2026-10-25 16:47:21 UTC
  Source report: https://urlscan.io/result/01a173f5-88d1-76db-98a2-21d211fb8b0d/
  SHA-256: 2fd07a3c5a0ae2f509e3c6918fc5c451eddcd5424a3ee860fbfbf8e3bb577b1d
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a173fa-48c6-717b-85bc-af796d94aaf3.png
  Captured: 2026-10-25 16:52:34 UTC
  Source report: https://urlscan.io/result/01a173fa-48c6-717b-85bc-af796d94aaf3/
  SHA-256: 2fd07a3c5a0ae2f509e3c6918fc5c451eddcd5424a3ee860fbfbf8e3bb577b1d

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T17:32:06Z",
        "uuid": "01a173ff-d7c8-73a3-a8db-6ff1f4cf1d92",
        "scanned_at": "2026-10-25T16:58:42Z",
        "final_url": "https://www.snaptubeoficial.com/",
        "status": 200,
        "ip": "43.169.50.100",
        "domains": [
            "st-sl.nxtsun.com",
            "www.instagram.com",
            "static.cdninstagram.com",
            "w.gdfsntgr.com",
            "api.glcaapi.com",
            "www.google-analytics.com",
            "www.googletagmanager.com",
            "www.clarity.ms",
            "ad-static.nxtsun.com",
            "scontent-lax3-1.cdninstagram.com",
            "scontent-lax3-2.cdninstagram.com"
        ],
        "ips": [
            "57.144.180.192",
            "142.251.211.174",
            "57.144.180.34",
            "142.250.191.8",
            "4.153.187.221",
            "149.129.179.97",
            "43.169.50.100"
        ],
        "asns": [
            "32934",
            "15169",
            "8075",
            "45102",
            "139341"
        ],
        "countries": [
            "US",
            "SG"
        ],
        "link_domains": [
            "d2zfax1dcjhc44.cloudfront.net",
            "www.instagram.com",
            "www.tiktok.com",
            "www.facebook.com",
            "twitter.com"
        ],
        "social": [
            "https://www.instagram.com/snaptubebrasil",
            "https://www.tiktok.com/@snaptubebrasil",
            "https://www.facebook.com/SnaptubeBrasil",
            "https://twitter.com/snaptubeapp"
        ],
        "doc_hash": "0eacdaca262dc11fb362806b78c0fc20c8cdd902b932b6fdd31c1d3ea80ff3af",
        "globals": [
            "webpackChunk_N_E",
            "__next_set_public_path__",
            "next",
            "__NEXT_DATA__",
            "__SSG_MANIFEST_CB",
            "__NEXT_P",
            "_N_E",
            "__flushDBEQ",
            "JSON3",
            "sensorsDataAnalytic201505",
            "sa",
            "sensorsdata_app_call_js",
            "sensorsdata_app_js_bridge_call_js",
            "__NEXT_PRELOADREADY",
            "i18nConfig",
            "__MIDDLEWARE_MATCHERS",
            "__BUILD_MANIFEST",
            "__SSG_MANIFEST",
            "clarity",
            "instgrm",
            "google_tag_data",
            "google_tag_manager",
            "dataLayer",
            "onYouTubeIframeAPIReady",
            "gaGlobal"
        ],
        "cookies": [
            "device_model",
            "server_user_id",
            "sajssdk_2015_cross_new_user",
            "sensorsdata2015jssdkcross",
            "mid",
            "_ga_NEQ46ZWE2X",
            "_ga"
        ],
        "storage_keys": [
            "__session_storage_support__",
            "__local_store_support__",
            "_randomId",
            "_timestamp",
            "__storage_test__"
        ],
        "tls": {
            "san": [
                "www.snaptubeoficial.com"
            ],
            "cipher": "AES_256_GCM",
            "issuer": "TrustAsia DV TLS RSA CA 2025",
            "subject": "www.snaptubeoficial.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-11-11T23:59:59Z",
            "valid_from": "2026-08-14T00:00:00Z"
        },
        "domain_age_days": 779,
        "apex_age_days": 877,
        "tls_age_days": 72,
        "tls_valid_days": 89,
        "requests": 86,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 42,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "TencentEdgeOne",
            "content-type": "text/html; charset=utf-8",
            "x-powered-by": "Next.js"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T17:34:03Z",
        "uuid": "b66737a2-35cf-4115-8195-a553526840a8",
        "scanned_at": "2026-10-25T17:33:11Z",
        "final_url": "https://www.snaptubeoficial.com/",
        "status": 200,
        "redirected": "subdomain",
        "history": [
            {
                "url": "https://snaptubeoficial.com/",
                "status": 301
            },
            {
                "url": "https://www.snaptubeoficial.com/",
                "status": 200
            }
        ],
        "dom_hash": "a37c7d01b9d9e37946413f1dd548e05d8fa63d1951efb4e5f0f58237c511b3ed",
        "doc_hash": "d1f37be700e7532e8fdffb0048c5519f901e767c94bfa6c3a4df789ebcf95b21",
        "domain_risks": [
            "Shareware/Freeware",
            "Technology"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "snaptubeoficial.com",
                "type": "CNAME",
                "value": "snaptubeoficial.com.eo.dnse3.com"
            },
            {
                "name": "snaptubeoficial.com",
                "type": "CNAME",
                "value": "snaptubeoficial.com.eo.dnse3.com"
            },
            {
                "name": "www.snaptubeoficial.com",
                "type": "CNAME",
                "value": "www.snaptubeoficial.com.eo.dnse3.com"
            },
            {
                "name": "www.snaptubeoficial.com",
                "type": "CNAME",
                "value": "www.snaptubeoficial.com.eo.dnse3.com"
            }
        ],
        "dnssec_valid": false,
        "ip": "43.169.50.100",
        "whois": {
            "registrar": "GoDaddy.com, LLC",
            "created": "2026-07-27T09:08:56Z",
            "updated": "2026-08-14T02:08:22Z",
            "expires": "2027-07-27T09:08:56Z",
            "nameservers": [
                "vip7.alidns.com",
                "vip8.alidns.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T17:32:33Z",
        "analysis_at": "2026-10-15T08:25:35Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "popularity": {
            "Cisco Umbrella": 904167,
            "Cloudflare Radar": 1000000
        },
        "registrar": "GoDaddy.com, LLC",
        "created": "2026-07-27T09:08:56Z",
        "expires": "2027-07-27T09:08:56Z",
        "updated": "2026-08-14T02:08:22Z",
        "first_seen": "2024-05-31T16:03:06Z",
        "dns": [
            {
                "ttl": 600,
                "type": "CNAME",
                "value": "snaptubeoficial.com.eo.dnse3.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "vip7.alidns.com"
            },
            {
                "ttl": 600,
                "type": "TXT",
                "value": "google-site-verification=nz_k_0gQU0hAvzjdEYcd6JCtrXgdcgasSBy6eccZM0E"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "vip8.alidns.com"
            },
            {
                "ttl": 60,
                "type": "A",
                "value": "43.169.50.100"
            },
            {
                "ttl": 600,
                "type": "SOA",
                "rname": "hostmaster.hichina.com",
                "value": "vip7.alidns.com"
            }
        ],
        "dns_at": "2026-10-15T08:26:07Z",
        "jarm": "2ad2ad0002ad2ad22c42d42d000000307ee0eb468e9fdb5cfcd698a80a67ef",
        "cert": {
            "san": [
                "snaptubeoficial.com"
            ],
            "issuer": "TrustAsia Technologies, Inc. / TrustAsia DV TLS RSA CA 2025",
            "serial": "db6a3843df130982cf5ce898eec36a9",
            "sha256": "7bab3103e64edb61232867216ac3f60d5ea88140be17bf7ec281942fe6c96e26",
            "subject": "snaptubeoficial.com",
            "valid_to": "2026-11-11T23:59:59Z",
            "valid_from": "2026-08-14T00:00:00Z"
        },
        "whois": {
            "registrar": "GoDaddy.com, LLC",
            "registrar_iana_id": "146",
            "registrar_url": "http://www.godaddy.com",
            "created": "2026-07-27T09:08:56Z",
            "updated": "2026-08-14T02:08:22Z",
            "expires": "2027-07-27T09:08:56Z",
            "status": [
                "clientDeleteProhibited",
                "clientRenewProhibited",
                "clientTransferProhibited",
                "clientUpdateProhibited"
            ],
            "nameservers": [
                "vip7.alidns.com",
                "vip8.alidns.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client delete prohibited",
                "client renew prohibited",
                "client transfer prohibited",
                "client update prohibited"
            ],
            "events": {
                "expiration": "2027-07-27T09:08:56Z",
                "last changed": "2026-08-14T02:08:22Z",
                "registration": "2026-07-27T09:08:56Z",
                "last update of RDAP database": "2026-10-15T08:25:56Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T17:34:25Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "snaptubeoficial.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-25T17:00:25Z",
            "first": "2024-09-06T16:49:13Z",
            "changes": 8,
            "days_archived": 9,
            "scans_per_day": 0.01,
            "avg_page_bytes": 9169
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://www.snaptubeoficial.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 15
        },
        "social_tags": {
            "title": "Snaptube oficial: baixe a versão verdadeira com segurança",
            "description": "Baixar Snaptube oficial para Android - APK grátis. Saiba diferenciar o app real das versões falsas e instale com segurança.",
            "canonicalUrl": "https://www.snaptubeoficial.com/"
        },
        "trackers": {
            "requests": 66,
            "trackers": [
                {
                    "name": "Google Tag",
                    "company": "Google",
                    "country": "US",
                    "category": "Advertising",
                    "requests": 1
                },
                {
                    "name": "Google Analytics",
                    "company": "Google",
                    "country": "US",
                    "category": "Site Analytics",
                    "requests": 1
                },
                {
                    "name": "Microsoft Clarity",
                    "company": "Microsoft",
                    "country": "US",
                    "category": "Site Analytics",
                    "requests": 3
                },
                {
                    "name": "Instagram",
                    "company": "Meta",
                    "country": "US",
                    "category": "Social Media",
                    "requests": 21
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://st-sl.nxtsun.com/stweb_static/snaptubeoficial.com/_next/static/Ly5jA8sAnqBek8pdN-zNY/_buildManifest.js",
                "https://st-sl.nxtsun.com/stweb_static/snaptubeoficial.com/_next/static/Ly5jA8sAnqBek8pdN-zNY/_ssgManifest.js",
                "https://st-sl.nxtsun.com/stweb_static/snaptubeoficial.com/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js",
                "https://st-sl.nxtsun.com/stweb_static/snaptubeoficial.com/_next/static/chunks/webpack-6c1073e6724c3e52.js",
                "https://st-sl.nxtsun.com/stweb_static/snaptubeoficial.com/_next/static/chunks/framework-495671ba7033a3dc.js",
                "https://st-sl.nxtsun.com/stweb_static/snaptubeoficial.com/_next/static/chunks/main-183fc474899d1d3a.js",
                "https://st-sl.nxtsun.com/stweb_static/snaptubeoficial.com/_next/static/chunks/pages/_app-a38ecc371e12fedf.js",
                "https://st-sl.nxtsun.com/stweb_static/snaptubeoficial.com/_next/static/chunks/pages/index-ef601baa08b698ea.js"
            ],
            "third_party_scripts": 8
        },
        "status": {
            "up": true,
            "code": 301,
            "timings": {
                "dns": 496,
                "tls": 11,
                "wait": 12,
                "connect": 13,
                "download": 0
            },
            "response_ms": 532
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                25,
                80,
                443,
                3000,
                8000,
                8080,
                8888
            ]
        },
        "carbon": {
            "bytes": 102314,
            "co2_grams": 0.0037,
            "cleaner_than": 21
        },
        "cookies": {
            "cookies": [
                {
                    "name": "device_model"
                },
                {
                    "name": "server_user_id"
                },
                {
                    "name": "sajssdk_2015_cross_new_user"
                },
                {
                    "name": "sensorsdata2015jssdkcross"
                },
                {
                    "name": "_ga_NEQ46ZWE2X"
                },
                {
                    "name": "_ga"
                },
                {
                    "name": "mid",
                    "secure": true,
                    "http_only": true,
                    "same_site": "None"
                }
            ]
        },
        "location": {
            "ip": "43.169.50.100",
            "asn": "139341",
            "org": "ACE",
            "city": "Singapore",
            "country": "SG"
        },
        "ssl": {
            "issuer": "TrustAsia Technologies, Inc. / TrustAsia DV TLS RSA CA 2025",
            "subject": "snaptubeoficial.com"
        },
        "dns": {
            "A": [
                "43.169.50.100"
            ],
            "TXT": [
                "google-site-verification=nz_k_0gQU0hAvzjdEYcd6JCtrXgdcgasSBy6eccZM0E"
            ],
            "CNAME": [
                "snaptubeoficial.com.eo.dnse3.com"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "43.169.50.100",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://snaptubeoficial.com",
                "https://www.snaptubeoficial.com/"
            ],
            "count": 1
        },
        "rank": {
            "domain": "snaptubeoficial.com"
        },
        "subdomains": {
            "count": 3,
            "subdomains": [
                "origin.snaptubeoficial.com",
                "staging.snaptubeoficial.com",
                "www.snaptubeoficial.com"
            ]
        },
        "linked_pages": {
            "external": [
                "https://d2jufbv6c23u04.cloudfront.net/webapk/snaptube/release/Click_me_to_install_SnapTube_tube_snaptube_sitegroup.apk",
                "https://www.snaptubeoficial.com/download-snaptube/",
                "https://www.snaptubeoficial.com/snaptube-pc/",
                "https://www.snaptubeoficial.com/snaptube-ios/",
                "https://www.snaptubeoficial.com/snaptube-player-download/",
                "https://www.instagram.com/snaptubebrasil/",
                "https://www.tiktok.com/@snaptubebrasil",
                "https://www.facebook.com/SnaptubeBrasil",
                "https://twitter.com/snaptubeapp"
            ],
            "external_count": 9,
            "internal_count": 1
        },
        "whois": {
            "registrar": "GoDaddy.com, LLC",
            "created": "2026-07-27T09:08:56Z",
            "updated": "2026-08-14T02:08:22Z",
            "expires": "2027-07-27T09:08:56Z",
            "status": [
                "clientDeleteProhibited https://icann.org/epp",
                "clientRenewProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp",
                "clientUpdateProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "vip7.alidns.com",
                "vip8.alidns.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "TencentEdgeOne",
                "content-type": "text/html; charset=utf-8",
                "x-powered-by": "Next.js"
            }
        }
    }
}
```