icloudsupport[.]co[.]uk

PhishDestroy identifies the domain icloudsupport.co.uk as an active Apple brand impersonation site currently under investigation for malicious intent. This domain mimics official Apple support channels, posing a credible threat to users seeking legitimate assistance. The current status remains active, with no definitive classification as malicious at this stage, though indicators suggest potential for phishing or credential harvesting activities. This domain was flagged by 2 of 95 VirusTotal vendors at the time of analysis, indicating low detection rates despite its suspicious nature. It resolves to IP address 172.67.190.218 and operates under a Google Trust Services SSL certificate. The domain was registered through Cloudflare, Inc. on May 03, 2010, and currently remains unblocked by major threat intelligence platforms. The absence of detections, combined with its long-standing registration and reputable hosting provider, underscores the stealthy nature of this impersonation campaign. Users are advised to exercise caution when encountering this domain or any unsolicited links claiming to represent Apple support. Avoid clicking or interacting with such domains, and report any suspicious activity to Apple or your security team immediately. Organizations should consider blocking this domain at the network perimeter and updating user awareness training to highlight Apple impersonation tactics. This advisory will be updated as further intelligence becomes available.