uaid[.]tap41477wq[.]cc

PhishDestroy has identified the domain uaid.tap41477wq.cc as an active brand impersonation threat specifically targeting Gmail users. This domain is currently offline, having been taken down after its malicious activities were detected. The site posed as a Gmail login page to steal user credentials, leveraging a deceptive interface designed to mimic the legitimate Gmail sign-in portal.

Technical analysis reveals several red flags. The domain was created on July 26, 2025, and resolves to IP address 38.182.168.153. It was flagged by 13 out of 95 VirusTotal vendors, indicating broad security consensus on its malicious nature. The domain appears on 2 security blocklists and was registered through GoDaddy.com, LLC. Notably, no SSL certificate was found on the site, which is a common characteristic of phishing domains that neglect to secure their pages. The page title was found to be "苹果" (meaning "apple" in Chinese), which may indicate a multi-language or misconfigured page.

As of now, the domain is offline, which reduces immediate risk. However, users should remain vigilant for similar domains that may appear in the future. PhishDestroy recommends that users always verify the authenticity of login pages, especially those requesting Gmail credentials. If you encounter a suspicious site, report it to PhishDestroy and never enter your credentials without verification. Enable two-factor authentication on your Gmail account to add an extra layer of security against credential theft.