00m-i-cloud[.]mipaginaweb[.]us

00m-i-cloud.mipaginaweb.us was registered on 21 February 2026 and currently resolves to 208.91.196.145, an address owned by Confluence Networks Inc (AS40034) located in the United States. The web server returns HTTP 200 and presents a TLS certificate issued by Let’s Encrypt (R12). Header analysis shows the stack includes Nginx, OpenResty and Google Cloud CDN, confirming hosting on Google Cloud infrastructure. The site is flagged by 16 of 93 VirusTotal scanners and is listed on the PhishDestroy and PhishingDB blocklists, giving it a Gridinsoft trust score of 0 / 100. Intelligence attributes the campaign to a tech‑support impersonation of Apple; the page title returned is “mipaginaweb.us”, matching the second‑level domain. No additional content has been captured, so the exact malicious payload and user‑interaction flow remain unknown. The domain is marked active with a high risk rating. Defenders should add 208.91.196.145 and the full host name to network‑level deny lists, monitor DNS queries for the domain, and consider sinkholing the address. Continuous re‑scanning of the site is advised to detect any changes in payload or hosting configuration.