iclouddispositivo[.]us

The domain iclouddispositivo.us is currently active and identified as a brand impersonation threat targeting Apple. This domain attempts to deceive users by mimicking Apple's identity, posing an elevated risk to unsuspecting victims. The ongoing status of this threat requires attention from cybersecurity professionals and end users alike.

According to threat intelligence, iclouddispositivo.us was registered on February 24, 2026, through the registrar Gransy, s.r.o. The domain resolves to IP address 31.148.99.121 and employs a Let's Encrypt SSL certificate to feign legitimacy. Notably, 10 out of 95 security vendors on VirusTotal have flagged this domain as malicious. Additionally, it appears on two security blocklists and has been blocked by OpenPhish and PhishingArmy, underscoring its malicious nature.

Currently, iclouddispositivo.us remains active and continues to pose a significant danger due to its elevated risk level. Users are strongly advised to avoid interacting with this domain or providing any personal information. Security teams should ensure that this domain is blocked across networks and update threat intelligence feeds accordingly. Continuous monitoring and user education about brand impersonation tactics are essential to mitigate potential harm from this ongoing threat.