findmy-support1[.]com

This domain, findmy-support1.com, is currently flagged as a high‑risk brand‑impersonation site targeting Apple users. The site presents a page titled “iCloud” and is classified under the generic phishing category. Google Safe Browsing lists it under SOCIAL_ENGINEERING, and it has been added to at least one public blocklist. The domain was registered on May 31 2026 through Sav.com, LLC and uses the nameservers ns1.md-35.webhostbox.net and ns2.md-35.webhostbox.net. Network analysis shows the domain resolves to IP 207.174.215.249, which belongs to the Unified Layer network (AS46606) located in the United States. An HTTPS service is available using a Let’s Encrypt certificate issued under the YR2 program, indicating that the attacker has obtained a valid TLS certificate to increase credibility. HTTP requests return a 200 status code, confirming that the site is actively serving content. VirusTotal scans report 15 of 95 security vendors flagging the domain as malicious, reinforcing the suspicion of phishing activity. The site has been blocked by the PhishDestroy service, and its presence on a security blocklist aligns with the observed Google Safe Browsing flag. No additional information about the phishing kit or payload is disclosed, leaving the exact methods of credential harvesting uncertain. Defenders should immediately add findmy-support1.com to URL filtering and DNS block lists. Monitoring of the associated IP address and its ASN is advised, as the hosting provider may be used for further campaigns. Users should be warned about unsolicited iCloud login prompts that route to this domain, and organizations should enforce multi‑factor authentication for Apple services to mitigate credential theft. Continuous re‑evaluation is recommended, as the actor may modify the site or migrate to new infrastructure.