tap4369743[.]cc

The domain tap4369743.cc is presently active and has been classified as a high‑risk generic phishing site. On the day of analysis it responded with HTTP status 200, and the page title retrieved from the server is “苹果”. The incident is tracked under the unique seed a3bc00, linking it to a broader campaign observed on July 12 2026.

Infrastructure records show the domain was created on 14 September 2025 via GoDaddy.com, LLC. Authoritative name resolution is handled by Cloudflare, using the nameservers ali.ns.cloudflare.com and piers.ns.cloudflare.com. The domain resolves to IP 38.182.168.147, which is hosted in the United States and assigned to AS40065 CNSERVERS LLC. The TLS certificate, issued by ZeroSSL ECC Domain Secure Site CA, is active and the site enforces HTTP Strict Transport Security (HSTS).

Reputation metrics are uniformly negative. The Gridinsoft trust score is 0 out of 100, and 16 of 95 security vendors on VirusTotal have flagged the domain as malicious. AlienVault OTX references tap4369743.cc in 15 separate threat‑intelligence pulses. The address appears on two public blocklists and is explicitly blocked by PhishDestroy and PhishingDB.

Although the actual page content has not been captured, the combination of a zero trust score, multiple vendor detections, inclusion in numerous intelligence feeds, and the presence of HSTS suggests a deliberate phishing operation. The domain’s registration age of less than one year and its rapid appearance on blocklists further reinforce the malicious intent.

Defenders should block outbound traffic to 38.182.168.147, add tap4369743.cc to DNS‑based filtering and URL‑allow‑deny lists, and monitor the domain for any changes in resolution or certificate attributes. Ongoing review of threat‑intel sources, especially updates to AlienVault OTX and blocklist feeds, is recommended to ensure continued protection against this and related infrastructure.