apple-edu-support[.]com

PhishDestroy identifies apple-edu-support.com as a malicious domain actively impersonating Apple’s educational support services to deceive users. This domain leverages Apple’s trusted brand to harvest credentials or deploy crypto drainers, exploiting the trust associated with Apple’s education initiatives. The domain’s naming convention closely mirrors Apple’s legitimate support domains, increasing the likelihood of successful deception among users seeking academic or institutional assistance.

This domain was flagged by PhishDestroy due to multiple red flags: VirusTotal currently shows 13/95 detections, indicating it remains undetected by most security vendors. The domain is registered through Global Domain Group LLC and was created on March 31, 2026, a suspiciously recent date that aligns with active campaign timelines. Additionally, it resolves to IP 104.21.90.166 and holds an SSL certificate issued by Google Trust Services, both of which are legitimate infrastructure components that threat actors often abuse to lend false credibility to their operations.

Users who have visited apple-edu-support.com should immediately cease any interaction with the site and avoid entering any credentials or sensitive information. If credentials were entered, change passwords immediately and enable two-factor authentication where possible. Report the domain to your IT security team or use PhishDestroy’s reporting tool to contribute to collective threat intelligence. Avoid clicking on any links or downloading files from this domain, as they may contain malware or further compromise your device.