cardano-zendesk[.]web[.]app

The domain cardano-zendesk.web.app is currently active and engaged in brand impersonation targeting Apple. Analysis indicates this is not a generic phishing attempt but a deliberate spoof of Apple's support infrastructure, as evidenced by the page title 'Cardano Support' and domain structure designed to mimic legitimate service portals. The site remains operational despite impersonating a major technology brand. Infrastructure analysis reveals the domain is registered through Google LLC and secured with an SSL certificate issued by Google Trust Services (WR4). The site resolves to IP address 199.36.158.100, located in the United States under AS54113 (Fastly, Inc.). While VirusTotal shows 0 detections across 95 security vendors, the domain appears on 4 independent security blocklists. Additional protective measures have been implemented by at least three cryptocurrency wallet providers, suggesting potential secondary targeting of digital asset users. Current status shows the infrastructure remains active as of this report. Organizations should immediately block the domain and associated IP address at network perimeter devices. Users should be advised to avoid interaction with any communications referencing this domain, particularly those claiming to originate from Apple support channels. Security teams should monitor for related infrastructure patterns, including domains combining cryptocurrency terms with support-related keywords, as this appears to be an emerging impersonation tactic.