fapp1[.]sulekhanotifications[.]com

PhishDestroy identifies fapp1.sulekhanotifications.com as an active brand impersonation scam targeting Apple users with elevated risk. This domain resolves to IP 202.162.242.179 and was registered through Network Solutions, LLC on March 25, 2016. The site currently shows a 2/95 detection rate on VirusTotal, indicating minimal but concerning security vendor recognition. This domain poses a clear credential theft threat by masquerading as official Apple notifications, leveraging the brand’s trust to trick users into surrendering login details or payment data. The use of the subdomain fapp1 (suggesting ‘fake Apple app notifications’) and the inclusion of ‘notifications’ in the hostname are deliberate attempts to appear legitimate. The long domain age (8 years) may be exploited to evade recent blocklists despite its malicious purpose. Security vendors such as MetaDefender and ThreatHive have already flagged this domain, but the low detection count suggests it may be newly active or using evasion techniques. Users who visited fapp1.sulekhanotifications.com should immediately check their Apple accounts for unauthorized access and revoke any suspicious sessions via appleid.apple.com. Do not enter passwords or payment information on this site. If credentials were entered, change them immediately and enable two-factor authentication. Report the domain to Apple via reportphishing@apple.com and block it using your browser’s security settings or a reputable blocklist. For network-level protection, consider updating your DNS resolver to include threat intelligence feeds that block known malicious domains.