muse-apple[.]netlify[.]app

The domain muse-apple.netlify.app is currently active and has been observed serving HTTP 200 responses. The site was registered on June 12, 2024 and is hosted on Netlify’s infrastructure. Its TLS certificate is issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1) and the connection is protected by HSTS. Network resolution points to the IP address 35.157.26.135, which belongs to the Amazon.com, Inc. AS16509 network and is geolocated in Germany. The underlying stack includes Bootstrap, jQuery, and Google Hosted Libraries, confirming a typical web‑application framework delivered through Netlify’s CDN. Threat intelligence flags the domain as a brand‑impersonation campaign targeting Apple. The page title “Apple Responsive Replica” and the classification as a tech‑support scam reinforce the impersonation intent. Google Safe Browsing lists the site under the SOCIAL_ENGINEERING category, and two independent blocklists—PhishDestroy and PhishingDB—have already added it. VirusTotal analysis shows 17 out of 95 security vendors marking the domain as malicious, while the Gridinsoft trust score is 0 out of 100, indicating a high likelihood of malicious use. Defenders should immediately block muse-apple.netlify.app at perimeter and DNS layers, and add the associated IP 35.157.26.135 to network‑level deny lists. Continuous monitoring of Netlify‑hosted domains for similar brand‑impersonation patterns is advised, as the infrastructure can be rapidly reused. Incident response teams should treat any traffic to this domain as hostile and consider user‑education campaigns highlighting the tech‑support scam vector.