icuwtzw[.]cloudaccess[.]host

The domain icuwtzw.cloudaccess.host poses a serious threat by impersonating Apple through a fraudulent page titled "Rechnung Apple-ID." This site is designed to trick users into believing they are viewing an official Apple invoice or billing notice, likely to steal sensitive information such as Apple ID credentials, payment details, or personal data. The page mimics Apple's branding to lower the guard of unsuspecting visitors, making it a classic brand impersonation phishing attack. Users who encounter this site should avoid entering any information and close the page immediately.

PhishDestroy identifies this threat using multiple data points. The domain was created on December 22, 2014, and is registered through eNom, LLC. It resolves to the IP address 104.37.86.66 and uses a PerfectSSL certificate, which can lend a false sense of security. Crucially, VirusTotal shows that 18 out of 95 security vendors flag this domain as malicious, and Google Safe Browsing also marks it as phishing. Additionally, it appears on one security blocklist. These indicators collectively confirm that the site is actively engaged in malicious activity targeting Apple users.

If you have visited icuwtzw.cloudaccess.host, take immediate steps to protect yourself. Do not enter any personal or financial information. Change your Apple ID password and any other passwords that may be similar. Enable two-factor authentication on your Apple account if not already active. Monitor your accounts for unauthorized activity, and consider running a security scan on your device. Report the phishing page to Apple and relevant authorities. Staying vigilant and following these safety measures can help mitigate any potential harm from this threat.