snaptubeappz[.]com

This domain is flagged as active brand impersonation with a creation date of September 12, 2016 through NameCheap, Inc. Infrastructure analysis reveals resolution to IP 216.238.105.67 and use of SSL from Google Trust Services alongside technologies including WordPress, MySQL, PHP, jQuery Migrate, jQuery, Cloudflare and HTTP/3. AlienVault OTX records place the domain in 23 threat intelligence pulses while VirusTotal reports 5 out of 95 vendors flagging it. The domain appears on two security blocklists and carries a Gridinsoft trust score of 0/100 with explicit blocks noted from PhishDestroy and BLP-Malware.

The reported page title Snaptube APK Download - Install Latest App Version (Updated 2025) aligns with the brand target across yet the full page content has not been analysed so the precise impersonation method remains unconfirmed from direct observation. The long registration history combined with current activity indicates the domain has persisted across multiple detection events without immediate takedown.

Defenders reviewing this domain should incorporate the listed IP and registrar details into existing blocklists and monitor for any related subdomains or certificate renewals. Cross-referencing the AlienVault OTX pulses and the two blocklist entries provides actionable indicators for network filtering rules. Continued observation of DNS changes at 216.238.105.67 is recommended given the active status.

Uncertainty remains around the exact campaign duration and any additional infrastructure tied to this registration because only the provided intelligence points are available. Practical steps include updating internal threat feeds with the exact VirusTotal ratio and ensuring WordPress and PHP-related signatures are tuned to detect similar deployments. The combination of low trust score and multi-vendor detections supports immediate quarantine treatment in security tooling.