Security Scan Report: cases-appleid.com

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 14 HTTP transactions. The main domain is cases-appleid.com and was registered 1 week ago.

Submitted URL: https://cases-appleid.com/

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Fake Apple ID sign-in on the 8-day-old, unranked domain cases-appleid.com collects Apple account emails; it impersonates Apple and is a phishing page. Do not enter credentials.

Risk Factors (6)
Impersonation of Apple (Apple ID sign-in branding and Apple Inc. copyright) on a non-Apple domain
Very new domain (8 days) combined with brand impersonation and a credential-collection form
Email/username harvesting form with a 'Continue' step on an unranked domain
Circular redirect in the redirect chain
Inline scripts use encoding/decoding functions (weak anti-analysis signal)
IDS alert for a suspicious GET to gate.php with no referer (informational, corroborating only)
Domain age information unavailable

Details

Page Title

Loading

Scan Type

public

Domain Name Analysis

Domain 'cases-appleid.com' uses the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'cases-appleid' is 13 characters long containing five vowels alongside seven consonants; it also includes 1 hyphen. It segments into 3 words: cases, apple, id. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cases-appleid.com/

Page Load Overview

0.37s
Total Load Time
40 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:148 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software51% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
51%
corporate business
39%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5172.67.171.214Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.21.39.235Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.250.154.95Google · CDNUnited States
AS15169Google LLC
144--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T115E2E836366111267873F62C67DB9549B131B003F405CAA4B99CB218CFCDAE586F6EF8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:dWrCTxtdRm3RbrxOA1fUTlmBlRBVXWbYX/8KxSHsh8rHugqB/:dWrCTxtdRmpMA1fUTlUHXSYXD2Y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:33943:gsCobKFDAlURkGpgCY0IK1MgzLVAAgkYYgfikhTAyQSAiBLBCQoHpIYQbBhQggDpYAwxkNMgGAXBWtBigkKjIqBVkBIIEVYi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000f8ffffffc3c3
Perceptual Hash:e94966279b9c961c
Difference Hash:03033132300e0f0f
Wavelet Hash:000018ffffe7c3c3
Color Hash:#c7e06c

Other Hashes

Crop Resistant:03033132300e0f0f

Scan History

Scan history not available

Unable to load historical scan data