# unlink-icloud.com — SUSPICIOUS

> PhishDestroy identifies unlink-icloud.com as an Apple iCloud phishing domain that mimics Apple's iCloud services.

## Summary
PhishDestroy identifies unlink-icloud.com as an active threat posing as Apple’s iCloud service, specifically targeting users seeking to ‘unlink’ their iCloud accounts. The domain is classified under brand impersonation with a current risk level under investigation, indicating active exploitation potential. The threat involves fraudulent replication of Apple’s iCloud interface to deceive victims into submitting sensitive login credentials or personal information.  This domain was flagged with a concerning 0/95 detections on VirusTotal as of the latest analysis, indicating it remains undetected by a majority of antivirus engines. It resolves to IP address 172.67.154.26 and is registered through NameSilo, LLC. The domain was created on July 24, 2025, and currently holds an SSL certificate issued by Google Trust Services, which may lend an appearance of legitimacy to unsuspecting users. Despite the lack of current blocklist entries, the combination of a newly registered domain, low detection rate, and SSL certification creates a high-risk profile for phishing and credential harvesting operations.  To mitigate exposure to unlink-icloud.com, users should avoid clicking on any links from unsolicited emails or messages claiming to assist with iCloud account management. Verify the authenticity of any website claiming to offer Apple iCloud services by checking the URL against Apple’s official domains (e.g., icloud.com) and ensuring HTTPS is present with a valid certificate chain. Organizations should consider blocking the IP address 172.67.154.26 and the domain unlink-icloud.com at the network perimeter. Immediate reporting of this domain to security teams and phishing awareness training can further reduce risk. This domain should be treated as hostile until further investigation confirms its neutralization.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Apple

## Domain Intelligence
- Registered: 2025-07-24 23:55:47
- Registrar: NameSilo, LLC
- IP: 172.67.154.26

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d65fb923-7eb8-40de-8144-fa5d48ae5a4e
- PhishDestroy: https://phishdestroy.io/domain/unlink-icloud.com/
- LLM endpoint: https://phishdestroy.io/domain/unlink-icloud.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/unlink-icloud.com/
Last updated: 2026-03-24