icloudsupport-inc[.]com

PhishDestroy identifies a brand impersonation phishing domain targeting Apple users via the domain icloudsupport-inc.com. This site is designed to deceive victims into surrendering sensitive credentials under the guise of providing legitimate iCloud support services. While the domain leverages a valid Let’s Encrypt SSL certificate to appear trustworthy, its malicious intent is confirmed through active phishing campaigns detected by multiple security vendors.

Technical indicators confirm this domain as a high-risk threat vector. According to VirusTotal, 10 out of 95 security vendors flagged icloudsupport-inc.com as malicious. The domain was registered on June 30, 2025, through Gransy, s.r.o., and resolves to IP address 31.148.99.121. It has been blocked by two prominent blocklists, OpenPhish and PhishingArmy, and currently does not appear on Google Safe Browsing (GSB) as of the latest scan.

As of the current assessment, icloudsupport-inc.com remains active and poses an elevated risk to unsuspecting users. Immediate responses include blocking access at the network and endpoint levels, updating firewall rules to block IP 31.148.99.121, and distributing user advisories to avoid interactions with this domain. Despite these actions, the domain’s recent creation and partial detection coverage (only 10/95 vendors) indicate that a residual risk persists, particularly targeting users seeking authentic Apple support channels. Users are strongly advised to verify support sources directly through official Apple domains and enable multi-factor authentication to reduce exposure to credential theft.