localizacaoiphone[.]com

PhishDestroy identifies localizacaoiphone.com as an active credential theft scam site impersonating Apple's iPhone tracking service to harvest user credentials.

This domain was flagged by 12 of 95 VirusTotal security vendors, registered through Gransy, s.r.o., resolving to IP 172.67.215.188 with a Let's Encrypt SSL certificate. The domain was created on February 19, 2026, indicating recent malicious acquisition. Trust scores from multiple blocklists remain critically low, with no legitimate service associations documented.

Current status shows active malicious hosting with elevated risk to potential victims. Security teams and users should immediately block the domain and IP at network firewalls while refraining from accessing the site. Report this threat to relevant authorities (e.g., CERT teams) and update threat intelligence feeds. Monitor for similar domains leveraging Apple's branding, as threat actors frequently recycle credential theft infrastructure.