icloud-com[.]co

icloud-com.co is a domain registered through Dynadot Inc on June 18 2026. The authoritative name servers ns1.md-79.webhostbox.net and ns2.md-79.webhostbox.net resolve the domain to IP 162.251.80.247, which belongs to the AS46606 Unified Layer network located in the United States. The site presented a TLS certificate issued by Let’s Encrypt (YR1), indicating that HTTPS was available at the time of observation. The page title returned by the HTTP response was “iCloud”, and the domain was classified as a brand‑impersonation campaign targeting Apple.

VirusTotal recorded 14 positive detections out of 91 scanned security vendors, and the domain appears on at least one external blocklist. Independent monitoring by PhishDestroy and Gridinsoft assigned a trust score of 0 / 100, confirming the malicious nature of the infrastructure. As of the report date (July 23 2026) the host appears to be taken offline, but the infrastructure components—namely the hosting provider, name‑server configuration, and SSL certificate—remain reusable for future campaigns.

Defenders should continue to block the IP 162.251.80.247 and add icloud-com.co to URL filtering and email security policies. Monitoring of the associated name servers and the Dynadot registration window is recommended to detect any re‑registration attempts. Threat‑intel feeds that reference the domain should be updated to reflect its confirmed brand‑impersonation status.