subwaysurferapk[.]net
“Subway Surfers Mod APK V3.50.0 Unlimited Coins 100% Working”
Resumen de las pruebas
Analysis of subwaysurferapk.net indicates a confirmed credential harvesting operation targeting Facebook users. The domain, registered on September 12, 2024, through Spaceship, Inc., currently resolves to 188.114.97.3 (AS13335, Cloudflare, Inc., US) and remains active as of July 12, 2026. Infrastructure analysis reveals the use of Cloudflare nameservers (dorthy.ns.cloudflare.com, thaddeus.ns.cloudflare.com), a Google Trust Services SSL certificate (WE1), and backend technologies including WordPress, MySQL, PHP, and the Nette Framework. The page title explicitly advertises 'Subway Surfers Mod APK V3.50.0 Unlimited Coins 100% Working,' a lure designed to attract users seeking unauthorized game modifications, likely redirecting to a Facebook login impersonation page. The domain is classified as a social media phishing site and appears on one security blocklist, with PhishDestroy currently blocking it. One of 95 security vendors in VirusTotal's dataset flags the domain, though this single detection does not conclusively determine maliciousness. The combination of brand impersonation (Facebook), Cloudflare proxying, and the use of a content management system suggests an attempt to evade detection while maintaining scalability. Defenders should treat this domain as high-risk, particularly for users searching for modified APK files. No evidence of takedown requests or sinkholing is present, and the site continues to serve content with a 200 HTTP status. Further investigation into associated download payloads or redirect chains is recommended to assess secondary infection vectors.
Data Coverage
Señales de seguridad
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 12/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
VirusTotal
0 → 1
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of subwaysurferapk.net · checked Mar 2, 2026
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.