tap4133rad[.]cc

The domain tap4133rad.cc has been identified as a generic phishing threat. It appears to be part of a scheme potentially attempting to deceive users into relinquishing sensitive information. Although specific branding or association with known phishing campaigns is not evident, the use of a page title indicating a CDN service could be a tactic to lend credibility and mislead victims.

Technical analysis of tap4133rad.cc reveals several indicators of malicious activity. VirusTotal flags this domain in 15 out of 95 security vendor scans, reflecting a significant level of suspicion. The domain was registered through a known provider, GoDaddy.com, LLC, and resolves to the IP address 154.38.99.2, located in Hong Kong under AS140224 Nebula Global LLC. It lacks an SSL certificate, which is another red flag for phishing attempts. The domain was created recently, on July 26, 2025, and it is currently included in two security blocklists.

As of now, tap4133rad.cc has been taken offline, which mitigates the immediate threat. The domain has been blocked by known security entities, such as PhishDestroy and PhishingDB, providing a level of protection against further exploitation. However, given the elevated risk level and its past appearance on security blocklists, continued monitoring for any reactivation or related domains is advisable. Users should remain vigilant and implement preventative measures to safeguard against phishing attempts.