hr[.]apple-cl0ud[.]com

The domain hr.apple-cl0ud.com was registered on May 12, 2026 through Tucows Domains Inc. and currently resolves to the IPv4 address 52.17.82.5, an Amazon Web Services EC2 instance in the eu-west-1 region of Ireland. DNS resolution uses four authoritative servers: dns.technorail.com, dns2.technorail.com, dns3.arubadns.net, and dns4.arubadn. The site presents a valid TLS certificate issued by Sectigo Limited under the Sectigo Public Server Authentication CA DV R36 chain, indicating the presence of HTTPS. Reputation scoring from Gridinsoft rates the domain at 0 / 100, and VirusTotal reports 13 detections out of 92 scanned vendors, confirming malicious activity. The domain is listed on a single public blocklist and has been actively blocked by the PhishDestroy service. The threat is classified as brand impersonation targeting Apple, with a high risk rating and an active status as of the report date. Content analysis of the web pages is not available, leaving the specific tactics employed by the site uncertain. Defenders should immediately add the domain to network and endpoint deny lists, enforce DNS sink‑hole rules for its IP address, and monitor for any traffic toward the associated AWS region. Ongoing surveillance of the four nameservers and the registrar account may reveal additional malicious subdomains.