# icloudbusca.support — MALICIOUS

> Avoid icloudbusca.support to protect your data from phishing scams. If you encounter this site, do not enter personal info and report it immediately.

## Summary
PhishDestroy identifies icloudbusca.support as a high-risk generic phishing domain impersonating iCloud services. It targets users attempting to access Apple-related content to steal sensitive information.

Technical analysis reveals the domain was created on February 23, 2026, and resolves to IP 31.148.99.121. It is flagged by Google Safe Browsing for social engineering and appears on multiple security blocklists. VirusTotal detection shows significant vendor consensus on its malicious nature.

Currently active, icloudbusca.support remains a threat. Users are urged to avoid interaction and network defenders should consider blocking its IP and domain to prevent compromise.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Page title: iCloud

## Domain Intelligence
- Registered: 2026-02-23 13:05:01
- Registrar: REGISTRAR_NOT_FOUND
- Country: Unknown
- IP: 31.148.99.121
- Nameservers: konnor.ns.cloudflare.com sue.ns.cloudflare.com

## Detection Status
- VirusTotal: 22 vendors flagged
  Vendors: ["ADMINUSLabs", "BitDefender", "CRDF", "Cluster25", "Criminal IP", "CyRadar", "DNS8", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Gridinsoft", "Kaspersky", "Lionic", "MalwareURL", "SOCRadar", "Seclookup", "Sophos", "Trustwave", "VIPRE", "Webroot", "alphaMountain.ai"]
- Google Safe Browsing: FLAGGED
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content

### Page Text
iCloud http://Page X/ is not available This webpage is not available Reload Details The server at Page can't be found, because the DNS lookup failed.  DNS is the network
        service that translates a website's name to its Internet address.  This
        error is most often caused by having no connection to the Internet or a
        misconfigured network.  It can also be caused by an unresponsive DNS
        server or a firewall preventing Google Chrome from accessing the network. Error code: DNS_PROBE_FINISHED_NXDOMAIN Unable to resolve the server's DNS address.

### Form Fields
- q
- text
- submit

## Evidence
- Screenshot: https://urlscan.io/screenshots/019c8a7f-2909-706f-8299-7cc6728919d9.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/6fb93abd-20de-4913-a9f4-89b047ff819b
- PhishDestroy: https://phishdestroy.io/domain/icloudbusca.support/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/icloudbusca.support/
Last updated: 2026-03-14