tap4156hoh[.]cc

The domain tap4156hoh.cc is currently active and flagged for high-risk brand impersonation targeting Apple. Analysis indicates that the domain was registered through GoDaddy.com, LLC on July 26, 2025. The domain resolves to the IP address 38.182.168.147, which is located in the United States and associated with ASN AS40065 CNSERVERS LLC. The domain does not have an SSL certificate, which is a common indicator of phishing sites aiming to reduce user trust and security. The page title found is '苹果', which translates to 'Apple' in Chinese, further confirming the intent to impersonate the brand. The domain appears on two security blocklists, PhishDestroy and PhishingDB, indicating a known history of malicious activity. VirusTotal reports that 15 out of 95 security vendors have flagged this domain as malicious, suggesting a moderate level of consensus among security tools. The exact content of the site has not been analyzed, but the available intelligence and the page title strongly suggest that it is an active Apple phishing scam. Defenders should block this domain at the network and endpoint levels to prevent users from accessing it. Additionally, monitoring for similar domain patterns and educating users about the risks of visiting unverified websites impersonating known brands is recommended to mitigate potential threats. The high risk level and the presence of the domain in multiple threat intelligence pulses highlight the importance of proactive measures to protect against credential theft and other phishing-related attacks.