sap31076eq[.]cc

This domain, sap31076eq.cc, is actively flagged as a high-risk phishing infrastructure targeting Apple users, as indicated by its page title '苹果' (Chinese for 'Apple'). Registered on August 20, 2025, through a major registrar, the domain resolves to IP address 38.182.168.153 and remains operational as of July 12, 2026. Analysis reveals its presence on three security blocklists, including PhishDestroy, PhishingDB, and BLP-Malware, and it has been referenced in 50 threat intelligence pulses on a public threat-sharing platform. Detection engines have flagged the domain, with 16 of 95 vendors identifying it as malicious during automated scans. The domain's trust score is rated at 0/100, further supporting its classification as malicious. While the exact phishing kit or payload remains unconfirmed, the combination of its page title, blocklist status, and detection history strongly suggests it is designed to impersonate Apple services. Defenders should treat this domain as hostile and prioritize blocking it at the DNS or network level, along with monitoring for related indicators such as its resolving IP. No evidence currently links this domain to broader campaign infrastructure, but its continued activity warrants ongoing scrutiny.