tap4395uv0[.]cc

The domain tap4395uv0.cc, associated with an Apple phishing scam, is currently offline. Despite its takedown, the domain was flagged by 17 out of 95 vendors on VirusTotal, indicating significant malicious activity. It was registered through GoDaddy.com, LLC and hosted on an IP address managed by CNSERVERS LLC in the United States.

The presence of the page title '苹果', which translates to 'Apple', suggests that this domain was used to impersonate Apple services, likely aiming to harvest user credentials or financial information. The domain was operational for a brief period, having been created on September 14, 2025, and detected by PhishDestroy on October 17, 2025. This rapid detection highlights the effectiveness of PhishDestroy's monitoring systems in identifying threats before they proliferate widely.

With SSL certificates issued by ZeroSSL, the domain may have appeared legitimate to unsuspecting users. The domain's inclusion in two public blocklists, PhishDestroy and PhishingDB, further underscores its malicious intent. The swift takedown of tap4395uv0.cc mitigates its threat, but the incident serves as a reminder of the persistent efforts by cybercriminals to exploit trusted brands like Apple.