apple-icloudlost[.]top

Analysis of the domain apple-icloudlost.top indicates an active phishing infrastructure targeting iCloud users. The domain was registered on April 24, 2026, through NameSilo, LLC, and currently resolves to the IP address 207.174.212.196. Infrastructure analysis reveals the domain is hosted on nameservers ns1.md-7.webhostbox.net and ns2.md-7.webhostbox.net, a pattern consistent with low-cost hosting providers frequently leveraged for phishing campaigns.

As of July 29, 2026, the domain is flagged by 18 of 91 security vendors on VirusTotal, and it appears on one security blocklist, specifically PhishDestroy. The domain's name, apple-icloudlost.top, suggests an intent to deceive users by mimicking iCloud-related services, though the exact content of the site has not yet been analyzed for specific phishing kit signatures or brand impersonation techniques. Defenders should treat this domain as elevated risk due to its recent creation, association with known phishing infrastructure, and detection by multiple security vendors.

Immediate action is recommended, including blocking the domain and IP at perimeter security controls, monitoring for connections to 207.174.212.196, and alerting users to potential credential harvesting attempts. Further analysis of the site's content and any associated phishing kit is advised to confirm the exact nature of the threat and identify additional indicators of compromise.