apple-phi[.]vercel[.]app

This domain, apple-phi.vercel.app, is currently flagged as an active brand impersonation threat targeting Apple. Analysis indicates the site is designed to deceive users into disclosing sensitive credentials or personal information by mimicking Apple’s official branding and user interface. The domain is operational and continues to resolve, posing a high-risk phishing vector for unsuspecting visitors. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Tucows Domains Inc. and resolves to the IP address 216.198.79.3, hosted on Amazon.com, Inc. infrastructure (AS16509). Security assessments show the domain is flagged by 18 of 95 vendors on VirusTotal, with detections from multiple threat intelligence sources. It appears on two security blocklists, including PhishDestroy and PhishingDB, and is secured with an SSL certificate issued by Google Trust Services (WR1). The page title explicitly displays 'Apple,' reinforcing its fraudulent intent to impersonate the legitimate brand. Current status confirms the domain remains active and accessible, with no takedown measures observed as of this assessment. Organizations and end-users are advised to block the domain at the network level and update endpoint protection rules to include the IP address 216.198.79.3. Security teams should monitor for related indicators of compromise, including user reports of credential theft or unauthorized access linked to this domain. Immediate reporting to the hosting provider and domain registrar is recommended to facilitate mitigation efforts.