ScanMalware.com

Security Scan Report: icloud-apple.xyz

Redirected to:
https://icloud-apple.xyz/#/login
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/40c46879-4a68-4f52-82ea-6e304ccda907Domain and IP registration (RDAP)/api/v1/rdap/40c46879-4a68-4f52-82ea-6e304ccda907How often this domain was scanned/api/v1/domain/stats/icloud-apple.xyzScan history for this domain/api/v1/domain/history/icloud-apple.xyz?limit=15
This website contacted 3 IPs in 2 countries across 2 domains to perform 11 HTTP transactions. The main domain is icloud-apple.xyz and was registered 5 days ago.

Submitted URL: https://icloud-apple.xyz

Effective URL:
https://icloud-apple.xyz/#/login
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

One-day-old icloud-apple.xyz impersonates Apple iCloud with a live password + verification-code login form and is flagged by Google Safe Browsing for social engineering. Treat as credential phishing; do not enter any credentials.

Risk Factors (5)
Safe Browsing Social Engineering (phishing) detection
Brand impersonation of Apple iCloud on a non-Apple domain
Credential-harvesting login form with password and verification-code fields
Domain only 1 day old and unranked
Placeholder/generic page title inconsistent with the claimed brand
Domain age information unavailable

Details

Page Title

ok

Scan Type

public

Domain Name Analysis

Domain 'icloud-apple.xyz' uses the open generic top-level domain (.xyz). The second-level label 'icloud-apple' is 12 characters long containing 5 vowels alongside 6 consonants, along with 1 hyphen. Breaking it apart gives 3 words: i, cloud, apple. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://icloud-apple.xyz

Page Load Overview

5.69s
Total Load Time
2.0 MB
Total Size

Language Analysis

Primary Language

🇰🇷Korean
Code: ko
Confidence:50%
Script:Hangul
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:25 chars
Detector Agreement:100%
Language mismatch: Declared as zh-CN but detected as ko

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5154.213.181.46Tokyo, Tokyo, Japan
AS54801Zillion Network Inc.
3104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
113--

Detected Technologies1

Vue.js
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12D2285264644062F027BDFA452B92B3579AFF64FDA195090D9FC439C438EFE2E0472B9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Ar9PKGKjLDg75is/AE0+9WjuCDgsgeJrS3TXEJODhGQScVx3E19:Ar9PKGKvM75isAE4jMVE19

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10015:BQg9oSwhTGEKLGQDUQC6ogKQBbQCigBytwNEOEvE5zgBxBGUlBg4zQFWE5DVAQYAgRwCgIAgHAoRcMIVU5hCBljYAqAFdEAH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcf8f8f8f838fff
Perceptual Hash:b8c3c764c7986693
Difference Hash:c0303030363631c6
Wavelet Hash:4f0f0f0f0f03818f
Color Hash:06000000e00

Other Hashes

Crop Resistant:c0303030363631c6,41014f4f17330f3d

Scan History

Scan history not available

Unable to load historical scan data