tap41836ta[.]cc

The domain tap41836ta.cc was identified on July 12, 2026 as a high‑risk generic phishing site. The web server returns HTTP 200 without TLS, and the page title reported by scanners is “苹果”. No SSL certificate is presented, indicating that traffic is unencrypted and easily interceptable.

Registration data shows the domain was created on July 26 2025 through GoDaddy.com, LLC. DNS resolution points to IP 154.38.99.2, which belongs to AS140224 (Nebula Global LLC) and is geolocated in Hong Kong. The authoritative nameservers are ali.ns.cloudflare.com and piers.ns.cloudflare.com, both Cloudflare‑managed, suggesting the attacker leverages a reputable DNS provider to hide infrastructure. Gridinsoft assigns a trust score of 0 / 100, confirming a lack of benign reputation.

Threat intelligence correlates the domain with 17 AlienVault OTX pulses and 15 of 95 security vendors on VirusTotal have flagged it as malicious, indicating a consensus of suspicious activity. The domain appears on two public blocklists and is currently listed by PhishDestroy and PhishingDB, reinforcing its classification as a phishing vector. The risk rating is high and the operational status remains active.

Defenders should immediately block tap41836ta.cc at perimeter firewalls, proxy filters, and DNS resolvers. Continuous monitoring of the associated IP address and its ASN is advised, as the same host may be reused for additional campaigns. Since the site lacks TLS, TLS inspection can capture the clear‑text payload for further analysis. Updating URL filtering feeds with the listed blocklists will reduce exposure to this threat.