snupay[.]net
“Buy/Sell Bitcoin, Ether and Altcoins | Cryptocurrency Exchange | Snupay”
Résumé des preuves
The domain snupay.net has been identified as a phishing site engaged in brand impersonation, specifically mimicking the cryptocurrency exchange Avalanche. This impersonation poses a risk of leading users to believe they are interacting with a legitimate Avalanche service, potentially resulting in financial loss or credential theft. The site is currently taken offline, but users who may have interacted with it should remain vigilant.
snupay.net has been flagged by 2 of 95 security vendors on VirusTotal, including Bfore.Ai PreCrime and Gridinsoft, and it appears on 1 security blocklist, PhishDestroy. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on July 28, 2024, and resolves to the IP address 172.67.160.136, located in the US under AS13335 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1. The page title observed was 'Buy/Sell Bitcoin, Ether and Altcoins | Cryptocurrency Exchange | Snupay', and the site used technologies such as Node.js, Vue.js, Nginx, Express, Cloudflare, and HTTP/3.
Users who have interacted with snupay.net should take immediate steps to protect their assets and personal information. For those who may have entered their Avalanche credentials, it is recommended to change passwords and enable two-factor authentication (2FA) on all related accounts. Additionally, users should monitor their Avalanche and other cryptocurrency wallets for any unauthorized transactions and consider moving their funds to a new, secure wallet. To report this phishing site, users can submit the domain to Google Safe Browsing, VirusTotal, and other relevant security platforms.
Data Coverage
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 11/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
État du domaine
Accessible → Inaccessible
-
État du domaine
Inaccessible → Accessible
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif