subwaysurfersmodi[.]com
“Subway Surfers Mod Apk v3.53.2 Unlimited Money & Characters”
Résumé des preuves
The domain subwaysurfersmodi.com was registered on August 07, 2025 through NameCheap, Inc. It resolves to the IP address 104.21.47.77, which belongs to Cloudflare (AS13335). DNS is served by gigi.ns.cloudflare.com and miguel.ns.cloudflare.com. The web server presents a valid TLS certificate issued by Google Trust Services / WE1 and negotiates HTTP/3. Infrastructure analysis shows the site runs WordPress backed by MySQL and PHP, with Cloudflare Browser Insights enabled.
The page title advertised on the site reads “Subway Surfers Mod Apk v3.53.2 Unlimited Money & Characters,” indicating a direct impersonation of the popular game brand. The threat classification is recorded as brand impersonation with a cryptocurrency scam tag, although no specific wallet or payment details are disclosed. VirusTotal reports 13 of 95 security vendors flagging the domain, and Gridinsoft assigns a trust score of 0 out of 100. The domain appears on one external blocklist and is listed as blocked by PhishDestroy, reinforcing its malicious intent.
Current intelligence lacks a concrete sample of malicious binaries or credential‑stealing scripts, and the exact mechanism used to lure victims into a cryptocurrency transaction remains unknown. The site’s content beyond the title has not been fully examined, leaving uncertainty about whether additional payloads or redirection techniques are employed.
Defenders should immediately add subwaysurfersmodi.com to DNS and URL filtering policies, enforce blocking of its resolved IP 104.21.47.77, and monitor for any outbound connections originating from internal hosts. Deploy sinkhole or proxy controls to intercept attempts to download the advertised APK, and educate users to avoid unofficial game modifications. Ongoing scanning with updated AV signatures is advised to capture any future payloads.
Data Coverage
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 11/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
-
VirusTotal
13 → 12
-
VirusTotal
12 → 13
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies
6 technologies identifiées avec une forte confiance
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of subwaysurfersmodi.com · checked Mar 2, 2026
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif