sn-baza[.]one

PhishDestroy identifies sn-baza.one as an active fake online store phishing domain designed to impersonate a legitimate e-commerce platform. The site is currently hosting malicious content and engaging in fraudulent transactions, posing a direct risk to users who may disclose sensitive payment or personal information. This domain is under active investigation and should be considered hazardous until further notice. sn-baza.one was registered through Dynadot LLC on April 28, 2026, and resolves to IP address 172.67.186.162. The domain currently shows 0 detections out of 95 VirusTotal vendors, indicating it has evaded immediate detection despite its malicious intent. It utilizes a Let's Encrypt SSL certificate to appear legitimate, with no current presence on public blocklists and no available trust or reputation scores as of the latest analysis. The domain’s recent creation date and clean detection status suggest a rapidly deployed threat aimed at exploiting user trust in familiar e-commerce brands. This domain remains active and unblocked, requiring immediate defensive action from users and organizations. PhishDestroy recommends blocking sn-baza.one at the network and endpoint levels using DNS filtering and firewall rules. Users should avoid visiting the site and report any encountered fraudulent activity. Organizations are advised to update threat intelligence feeds and conduct user awareness training to mitigate exposure. Continuous monitoring is required due to the domain’s evolving nature and potential for rapid changes in infrastructure.