idevicemyfind[.]us

This domain, idevicemyfind.us, is actively engaged in credential theft targeting Apple iCloud users. Analysis indicates the site mimics legitimate Apple login portals to harvest usernames, passwords, and two-factor authentication codes. The infrastructure is currently operational and has not been taken down by the registrar or hosting provider. Infrastructure analysis reveals the domain was registered on June 23, 2026, through NameSilo, LLC, and resolves to the IP address 162.144.180.56. As of the latest assessment, 6 of 95 security vendors on VirusTotal have flagged idevicemyfind.us for malicious activity. Google Safe Browsing has also classified the domain as a phishing site. The domain's creation date suggests it was established specifically for short-term malicious campaigns, a common tactic in credential theft operations. The domain remains active and continues to pose a significant risk to users. Organizations are advised to block the domain and its resolving IP at the network perimeter. End users should avoid interacting with any communications or links referencing idevicemyfind.us. If credentials have been entered on this site, immediate password resets and account monitoring are recommended. Network defenders should monitor for connections to 162.144.180.56 and review logs for any prior interactions with this infrastructure.