supports-cloudmyapple[.]sbs

Analysis of the domain supports-cloudmyapple.sbs indicates confirmed phishing infrastructure targeting Apple users. The domain was registered on April 2, 2026, through Atak Domain, a registrar frequently associated with abusive registrations. As of July 29, 2026, the domain resolves to the IP address 207.174.212.196 and is hosted on nameservers ns1.md-7.webhostbox.net and ns2.md-7.webhostbox.net, a configuration commonly observed in phishing campaigns. The domain appears on one security blocklist and is actively blocked by PhishDestroy, a specialized anti-phishing service.

VirusTotal detection data shows that 18 out of 91 security vendors flag this domain as malicious, providing further evidence of its use in phishing operations. While the exact content of the site has not been analyzed, the domain name itself—combining 'supports,' 'cloud,' and 'myapple'—strongly suggests an attempt to deceive users into believing it is an official Apple support or cloud service portal. No additional brand-specific indicators, such as page titles or phishing kit signatures, were provided in the available intelligence.

Defenders should treat this domain as active phishing infrastructure and prioritize blocking it at the DNS, network, and endpoint levels. Given the domain's recent registration and detection by multiple security vendors, organizations should also monitor for related domains registered through the same registrar or hosted on the same nameservers, as these may indicate a broader campaign. Further investigation into the hosting IP (207.174.212.196) may reveal additional malicious domains sharing the same infrastructure.