oficial-icloud[.]com

This domain, oficial-icloud.com, is flagged as an active brand impersonation threat targeting Apple users. Analysis indicates the site mimics the legitimate iCloud interface, as evidenced by its page title 'iCloud,' to deceive victims into disclosing sensitive credentials. The threat type is classified as credential theft through brand impersonation, with no evidence of crypto drainer functionality at this time. The domain leverages Apple's branding to exploit user trust, a common tactic in phishing campaigns targeting high-value accounts. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 104.21.50.67 and was registered through Gransy, s.r.o. on February 19, 2026. It is secured with an SSL certificate issued by Google Trust Services, which may lend a false sense of legitimacy to unsuspecting users. Detection metrics show 18 out of 95 security vendors on VirusTotal have flagged this domain as malicious. The domain has also been documented in one threat intelligence pulse on AlienVault OTX, further corroborating its malicious nature. No entries were found in Google Safe Browsing at the time of analysis, though this does not diminish the confirmed risk. The domain remains active as of this report, posing an ongoing risk to users who may encounter it through phishing emails, malicious advertisements, or compromised links. Response actions should include immediate blocklisting at the network and endpoint levels, as well as user education to recognize brand impersonation tactics. Despite its low detection count relative to some phishing campaigns, the domain's use of a trusted brand and valid SSL certificate increases its potential for success. Organizations and individuals are advised to treat this domain as high-risk and implement proactive monitoring for related infrastructure or similar impersonation attempts.