surnexis[.]com
“Surnexis Token | Official Website – Secure Presale & High Bonus Rewards”
Resumo das evidências
Analysis of surnexis.com indicates that the domain was registered on February 27 2026 through Hostinger operations, UAB and is hosted on an IP address (92.113.16.66) owned by AS47583 Hostinger International Limited, located in Germany. The domain resolves to nameservers ns1.dns-parking.com and ns2.dns-parking.com, typical of parked or quickly provisioned domains. No TLS certificate is presented, meaning the site is served over plain HTTP, which reduces credibility and facilitates man‑in‑the‑middle interception. The page title returned from the site, “Surnexis Token | Official Website – Secure Presale & High Bonus Rewards”, suggests a cryptocurrency presale offering, and the classification as “Brand Impersonation” aligns with attempts to lure investors under the guise of a legitimate token project.
VirusTotal reports that 2 of 93 scanned security vendors flagged the domain, and the domain appears on a single active blocklist, specifically PhishDestroy, confirming that at least one commercial phishing mitigation service has taken it down. The current status is recorded as offline, indicating that the hosting provider has removed the site or the domain is otherwise inaccessible. Uncertainty remains regarding the specific phishing kit or payload used, as no additional forensic evidence such as captured URLs, scripts, or credential‑phishing forms has been released.
Defenders should continue to monitor the domain, block the IP address 92.113.16.66 and the associated AS47583 in network‑level controls, and add surnexis.com to internal URL filtering and email gateways. Because the domain lacks a valid SSL certificate and is hosted on a generic parking service, any future re‑hosting attempts are likely to reuse the same infrastructure, so periodic re‑resolution checks are advised.
Instantâneo das evidências enviadas
- Enviado
- Registros do livro-razão
- 1
- ID do caso
PD-20260227-873B6C- Título da página capturada
- Surnexis Token | Official Website – Secure Presale & High Bonus Rewards
- Artefato PDF
- Evidência em PDF
Base jurídica
Texto completo da evidência
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (Unknown):
International Anti-Cybercrime Regulations
Budapest Convention on Cybercrime
Universal Fraud Prevention Laws
Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Data Coverage
Inteligência de segurança de rede
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | www.youtube.com/s/player/00c52fa0/player_es6_tcc.vflset/en_us/base.js |
audit | Hunting_JS_WebAssembly |
Pipeline de resposta a ameaças
Cobertura de listas de bloqueio
10 fontes externas monitoradas · instantâneo de 12/08/2026
10 fontes externas monitoradas Sem correspondência
Linha do tempo de detecção
-
VirusTotal
0 → 2
-
Cloudflare Radar
Varredura do Cloudflare Radar armazenada · Abrir varredura
-
Status do domínio
Acessível → Inacessível
-
Cloudflare Radar
Varredura do Cloudflare Radar armazenada · Abrir varredura
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, nomes TLS e datas
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análise do VirusTotal
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo