snaptour[.]app

The domain snaptour.app was observed as an active generic phishing infrastructure on August 04, 2026 and classified with an elevated risk level. Threat intelligence indicates that the domain is blocked by PhishDestroy and appears on one external security blocklist, confirming that defensive feeds have already taken action against it. DNS resolution points to the IP address 216.150.1.193, which is the sole host currently associated with the domain.

A VirusTotal analysis shows that one out of ninety‑one security vendors flagged the domain, providing a minimal but non‑trivial indication of malicious behavior. No additional data such as registrar information, SSL certificate details, HTTP status codes, Safe Browsing verdicts, or page title content is presently available, limiting the depth of the current technical profile. The lack of broader vendor consensus suggests that the phishing kit may be newly deployed or employing evasion techniques that reduce detection coverage.

Defenders should immediately add snaptour.app to firewall and DNS filtering policies, monitor for any outbound connections to the associated IP, and consider sinkholing the domain to gather further telemetry. Ongoing observation of the IP 216.150.1.193 for related activity, as well as periodic re‑query of VirusTotal and other reputation services, is recommended to capture any escalation in detection rates. Given the elevated risk classification, continuous threat‑intel updates and sharing of any newly discovered indicators of compromise will aid in mitigating the potential impact of this campaign.