mail[.]soporte-apple[.]us

The domain mail.soporte-apple.us is a sophisticated phishing attempt targeting Apple users. It is flagged by 18 out of 91 vendors on VirusTotal, indicating a significant threat level. The domain, which has been taken down, was first identified by PhishDestroy on 2026-06-21. It was registered with an unknown registrar and hosted on an IP in the U.S. under AS46606 Unified Layer.

This domain utilized Let's Encrypt for SSL certification, a common tactic among phishing sites to appear legitimate. Google Safe Browsing has also flagged the domain, adding to its credibility as a malicious entity. The impersonation of Apple aims to exploit users' trust in the brand, potentially leading to credential theft or financial loss.

Despite its current offline status, the domain's high platform risk score of 98 out of 100 highlights the potential impact it could have had. The rapid detection by PhishDestroy underscores the importance of early identification in mitigating phishing attacks. This case exemplifies how phishing domains can exploit the time gap between registration and broader detection by antivirus vendors, emphasizing the need for proactive threat intelligence.