icloudmapa[.]com

The domain icloudmapa.com has been identified as a brand impersonation threat specifically targeting Apple's iCloud service. This domain is currently offline, but its recent activity posed a significant risk to users who might have encountered a fake login page designed to steal credentials. The phishing campaign leveraged a convincing page title of 'iCloud' to deceive visitors into believing they were accessing a legitimate Apple portal.

Technical analysis reveals that icloudmapa.com was registered through Gransy, s.r.o. and created on March 29, 2026. It resolved to IP address 188.114.96.3 and used an SSL certificate from Let's Encrypt (E8), which is commonly abused by malicious sites to appear legitimate. VirusTotal data shows that 12 out of 95 security vendors flagged this domain as malicious, and it appears on 2 security blocklists. These indicators point to a well-prepared phishing operation with moderate trust scores due to its recent registration and certificate choice.

As the domain is now offline, the immediate threat is contained, but users should remain vigilant. PhishDestroy recommends that anyone who may have visited icloudmapa.com or entered credentials should change their Apple ID password immediately and enable two-factor authentication. Always verify the authenticity of login pages by checking the URL carefully and using official bookmarks. Report any similar suspicious domains to security teams to prevent future attacks.