# appleoficial.support — MALICIOUS

> appleoficial.support is a brand impersonation site targeting Apple users, flagged by 20 of 95 VirusTotal vendors since Feb 2026. Avoid interaction.

## Summary
The domain appleoficial.support poses a serious brand impersonation threat by masquerading as an official Apple service, specifically using the page title "iCloud" to deceive users. This tactic aims to trick individuals into believing they are interacting with Apple's legitimate support or cloud services, potentially leading to the theft of personal data, login credentials, or financial information. Users should be cautious and avoid entering any sensitive information on this site to prevent identity theft or financial loss.

PhishDestroy's analysis reveals that appleoficial.support was registered on February 8, 2026, through the registrar Gransy, s.r.o. The domain has been flagged by 20 out of 95 security vendors on VirusTotal, indicating a significant consensus about its malicious intent. It currently appears on two prominent security blocklists, OpenPhish and PhishingArmy, further confirming its elevated risk level. The domain uses a free SSL certificate from Let's Encrypt, which can give a false sense of security despite the site’s fraudulent nature. It resolves to the IP address 31.148.99.121, which should be monitored by network defenders.

If someone has visited appleoficial.support, it is critical not to provide any personal or login information. Users who suspect they may have submitted credentials should immediately change their Apple ID password and enable two-factor authentication for enhanced security. Running a comprehensive malware and antivirus scan is advisable to detect any potential infections. Additionally, reporting the site to relevant cybersecurity authorities can help protect others from falling victim to this impersonation attempt. Staying vigilant about domain authenticity and verifying URLs before engagement remains the best defense against such threats.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Apple
- Page title: iCloud

## Domain Intelligence
- Registered: 2026-02-08 20:13:05
- Registrar: Gransy, s.r.o.
- IP: 31.148.99.121

## Detection Status
- VirusTotal: 20 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["OpenPhish", "PhishingArmy"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/f688ca22-9d4c-47c7-85dd-dd5b5d387490
- PhishDestroy: https://phishdestroy.io/domain/appleoficial.support/
- LLM endpoint: https://phishdestroy.io/domain/appleoficial.support/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/appleoficial.support/
Last updated: 2026-03-29