iosa[.]click

PhishDestroy identifies iosa.click as an active credential-phishing domain targeting Apple ID theft, currently under investigation. The site resolves to IP 45.151.91.170 and was registered on January 29, 2026 via Dynadot, LLC. As of seed fbc9a7, VirusTotal has recorded 0 vendor detections across 95 scans, and it holds no current blocklist presence, leaving it unflagged by mainstream security engines. The domain employs a Let's Encrypt SSL certificate to appear legitimate and has no documented associations with known trustworthy entities. Its recent creation date, coupled with zero detections, suggests it may be part of a short-lived campaign designed to evade early detection. The absence of detections does not equate to safety—this domain is actively monitored for phishing behavior. Users are advised to avoid any interaction with iosa.click, including clicking links or entering credentials. If exposed, change Apple ID passwords immediately and enable two-factor authentication. Report suspicious domains to Apple’s fraud reporting channels and update browser or security tool blocklists accordingly. This domain remains under active scrutiny and should be treated as hazardous until proven otherwise.