tapme[.]im

PhishDestroy identifies the active phishing domain tapme.im as a generic phishing campaign currently under investigation, posing as a crypto drainer. The domain is classified with a risk level of 'under_investigation' and remains in active status as of the latest threat intelligence update. This domain resolves to the IP address 188.114.96.3 and utilizes an SSL certificate issued by Google Trust Services, which may contribute to its evasion of detection mechanisms. PhishDestroy notes that tapme.im has not yet been flagged by any of the 95 VirusTotal vendors, indicating a low detection rate despite its malicious nature. Further investigation is required to determine the registrar name, domain creation date, and blocklist status. The absence of detections suggests a recently deployed or highly evasive campaign. Users are strongly advised to avoid interacting with tapme.im and to report any encountered instances to PhishDestroy for further analysis. Given the domain's active status and lack of detection, it is recommended to block or flag tapme.im at the network level to prevent potential exposure. Regular monitoring of threat intelligence feeds for updates on this domain is highly encouraged. PhishDestroy continues to assess this campaign, and users should verify the latest status before engaging with any links or content associated with tapme.im.