id-icloudfotos[.]com

This domain, id-icloudfotos.com, presents an elevated-risk brand impersonation threat targeting Apple users. Analysis indicates the site mimics the iCloud login interface, as evidenced by the page title 'iCloud,' with the intent to harvest user credentials. The domain specifically replicates Apple’s authentication portal, a common tactic in credential theft campaigns designed to deceive users into entering sensitive account details under false pretenses. Infrastructure analysis reveals multiple technical indicators supporting this assessment. The domain resolves to the IP address 31.148.99.121 and was registered on March 29, 2026, through the registrar Gransy, s.r.o. Detection metrics further confirm its malicious nature, with 17 out of 95 security vendors on VirusTotal flagging the domain as malicious. Additionally, the domain appears on one security blocklist and is associated with Apache HTTP Server technology. The Gridinsoft trust score of 0/100 underscores its lack of legitimacy. Users who may have interacted with this domain should take immediate remedial action. Any credentials entered on the site should be considered compromised and must be changed without delay, prioritizing accounts linked to Apple services. System scans using updated security tools are recommended to detect potential secondary infections. Users should also monitor accounts for unauthorized activity and enable multi-factor authentication where available to mitigate further risks. Awareness of similar impersonation tactics is advised to prevent future exposure.