snetsave[.]com

Analysis of snetsave.com, registered through NiceNIC International Group Co., Limited on February 21 2026, shows the domain is currently offline. DNS resolution points to the Cloudflare‑hosted address 188.114.96.3, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. The domain uses Cloudflare’s default nameservers everton.ns.cloudflare.com and jo.ns.cloudflare.com and does not present an SSL/TLS certificate, resulting in an HTTP response that returns the page title “404 Not Found”. Gridinsoft assigns a trust score of 0 / 100, indicating the highest level of suspicion.

AlienVault OTX references the domain in a single threat‑intel pulse, and three independent blocklists have listed it. Additional blocking is observed from PhishDestroy, MetaMask, and SEAL. VirusTotal analysis reports that six of ninety‑three scanning engines flagged the domain, reinforcing the malicious assessment. The intelligence categorises the activity as a generic phishing operation that supports an investment‑scam campaign.

While the offline status limits real‑time observation of payloads or phishing pages, the combination of low trust score, multiple blocklist entries, and vendor detections provides strong evidence of malicious intent. Defenders should continue to block the domain at perimeter and endpoint layers, monitor for any resurgence of the host, and consider adding the associated IP address 188.114.96.3 to deny‑list rules. Ongoing vigilance is advised because Cloudflare‑based infrastructure can be repurposed quickly, and the lack of TLS does not preclude future use of encrypted channels. No further forensic artifacts, such as malware hashes or phishing templates, have been published for this domain at this time.