detect-idevice[.]us

This domain, detect-idevice.us, is currently active and classified as a credential harvesting phishing site specifically targeting Apple ID users. Analysis indicates the infrastructure is designed to mimic legitimate Apple device verification portals, likely to capture login credentials, payment details, or personal information under false pretenses. The domain remains operational and poses an elevated risk to unsuspecting users. Infrastructure analysis reveals detect-idevice.us resolves to the IP address 162.144.180.56, a host with a history of malicious activity. The domain is flagged by 10 of 95 security vendors on VirusTotal, indicating moderate consensus on its phishing classification. The SSL certificate is issued by Let's Encrypt, a common tactic among threat actors to lend superficial legitimacy to fraudulent sites. No additional registrar details or creation date metadata were available at the time of analysis, but the domain's active status and vendor detections warrant immediate scrutiny. Current status confirms detect-idevice.us remains accessible and operational. Organizations and individuals are advised to block the domain and its associated IP (162.144.180.56) at the network perimeter. Endpoint protection solutions should be updated to include this domain in phishing and malicious site blocklists. Users who may have interacted with the domain should reset their Apple ID credentials immediately and enable multi-factor authentication. Network logs should be reviewed for connections to 162.144.180.56 to identify potential compromise.