apples-service-care[.]vercel[.]app

This domain is classified as a high-risk brand impersonation threat specifically targeting Apple users. Analysis indicates the infrastructure is designed to deceive visitors into believing they are interacting with official Apple Customer Service channels, potentially leading to unauthorized account access or financial fraud through social engineering tactics. Infrastructure analysis reveals the domain apples-service-care.vercel.app is currently active and resolves to IP address 64.29.17.131, located in the United States under Amazon.com, Inc.'s AS16509. The domain was registered through Tucows Domains Inc. with a creation date of February 21, 2026, which appears anomalous given the current date. Security detection metrics show 17 out of 95 vendors on VirusTotal flagging this domain, while it appears on two distinct security blocklists and is explicitly blocked by PhishDestroy and PhishingDB. Google Safe Browsing has also classified this as a phishing threat, and the SSL certificate is issued by Google Trust Services (WR1), providing a false sense of security. Mitigation against this brand impersonation threat requires immediate action from both end users and security teams. Users should verify all Apple support communications through official channels only, particularly avoiding any contact information provided on the suspicious domain. Security teams should implement DNS-based blocking for apples-service-care.vercel.app and its resolving IP 64.29.17.131, while monitoring for similar patterns in domain registration (Vercel-hosted subdomains with Apple-related naming conventions). Organizations should also educate users about the risks of brand impersonation scams, emphasizing that official Apple communications will never use third-party hosting platforms for support services.