yaps[.]kaito-ai[.]click

The domain yaps.kaito-ai.click was registered on September 27, 2025 and is currently listed as offline. Technical records show it was delegated to Cloudflare name servers amit.ns.cloudflare.com and sandra.ns.cloudflare.com, and resolves to the Cloudflare edge address 162.159.140.229, which is associated with AS13335 in the United States. No SSL certificate is present, so the site does not serve content over HTTPS, a characteristic often observed in rapid‑deployment phishing infrastructure. The registrar information indicates the domain was obtained through Web Commerce Communications Limited, and the Gridinsoft trust score rates the domain at 0 out of 100, reflecting a lack of reputational credibility.

The page title retrieved from the site, "X. Alles, was gerade los ist / X," bears no apparent connection to the targeted brand, Apple, suggesting the content has not been publicly analyzed or that the title was deliberately generic to evade simple keyword detection. VirusTotal scans recorded six detections out of ninety‑five security engines, confirming that multiple vendors have identified malicious behavior tied to the domain. Additionally, the domain appears on at least one external blocklist, PhishDestroy, and has been flagged in a broader security blocklist, reinforcing the consensus that it is being used for brand‑impersonation attacks.

The threat is classified as brand impersonation of Apple, with an elevated risk rating. Defenders should ensure the domain is blocked at network perimeter and DNS layers, monitor for any new subdomains or variations that resolve to the same Cloudflare IP range, and update intrusion‑detection signatures to include the observed page title and the lack of TLS. Ongoing vigilance is advised because the offline status may be temporary; threat actors often reactivate infrastructure after takedown attempts.