tap37851r6[.]cc

tap37851r6.cc has been confirmed as a high-risk phishing site based on multiple threat indicators and intelligence sources. The domain was created on June 30, 2025, and is currently active, resolving to the IP address 38.182.168.147, which is located in the United States and is part of the AS40065 CNSERVERS LLC network. This domain lacks an SSL certificate, which is a common characteristic of phishing sites as it reduces the perceived legitimacy by users. The domain has been flagged by 15 out of 95 security vendors on VirusTotal, and it has a Gridinsoft trust score of 0 out of 100, indicating a significant level of distrust. Additionally, the domain appears in 15 threat intelligence pulses on AlienVault OTX, further corroborating its malicious nature. tap37851r6.cc is also listed on two security blocklists, specifically PhishDestroy and PhishingDB, which are known for tracking and identifying phishing activities. The domain is registered through GoDaddy.com, LLC, a common registrar for both legitimate and malicious domains. Defenders should be highly cautious when encountering this domain and should block it to prevent potential phishing attacks. The exact content of the site has not been analyzed, but the combination of the high number of security vendor flags, low trust score, and presence on multiple threat intelligence feeds and blocklists strongly suggests that tap37851r6.cc is being used for phishing activities. Network administrators and security teams are advised to monitor and block traffic to this domain to protect their users from potential threats.