icloudpro[.]zakiassinaturas[.]shop

PhishDestroy has identified icloudpro.zakiassinaturas.shop as an active Apple impersonation domain designed to steal credentials and deploy crypto drainers. This site masquerades as an iCloud login portal, tricking users into entering Apple ID credentials or downloading malicious scripts that drain cryptocurrency wallets. VirusTotal currently flags it at 1/95 detections, meaning no antivirus or security tool has yet flagged its malicious nature, leaving users exposed to potential compromise. The domain resolves to IP address 185.158.133.1 and is hosted under a Google Trust Services SSL certificate, which may lend false legitimacy to unsuspecting visitors. This domain is under active analysis due to its clear intent to mimic Apple’s branding and infrastructure. The subdomain icloudpro suggests a spoofed iCloud service, likely targeting Apple users who may overlook subtle misspellings or unfamiliar domain names. The domain was registered with limited public information, obscuring its true ownership and increasing the risk of prolonged malicious activity. Despite its recent appearance in threat feeds, the lack of detections highlights the evasiveness of this threat, which may evolve to evade detection or expand its operations. If you visited icloudpro.zakiassinaturas.shop, assume your device may have been compromised. Do not enter any Apple ID credentials or download files from this site. Disconnect from the internet and run a full antivirus scan immediately. Change your Apple ID password from a known-safe device and enable two-factor authentication. Report the domain to PhishDestroy for further analysis and block it on your network or DNS level to prevent future exposure.