ScanMalware.com

Security Scan Report: icloud-jp9.xyz

Redirected to:
https://icloud-jp9.xyz/#/login
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8bb543ed-2b80-4dcc-a0be-2ba76e961ab8Domain and IP registration (RDAP)/api/v1/rdap/8bb543ed-2b80-4dcc-a0be-2ba76e961ab8How often this domain was scanned/api/v1/domain/stats/icloud-jp9.xyzScan history for this domain/api/v1/domain/history/icloud-jp9.xyz?limit=15
This website contacted 3 IPs in 2 countries across 2 domains to perform 11 HTTP transactions. The main domain is icloud-jp9.xyz and was registered 1 week ago.

Submitted URL: https://icloud-jp9.xyz

Effective URL:
https://icloud-jp9.xyz/#/login
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

One-day-old icloud-jp9.xyz mimics iCloud with a generic Chinese login form and is flagged by Google Safe Browsing for social engineering — a textbook credential phishing page. Do not enter credentials.

Risk Factors (5)
Google Safe Browsing social-engineering (phishing) detection
Brand impersonation of iCloud/Apple via deceptive hostname on a non-official domain
Domain registered 1 day ago (CRITICAL age category) and unranked
Credential-collecting login form (account, password, captcha) on a mismatched hostname
Placeholder title 'ok' and garbled OCR text indicating an assembled phishing kit
Domain age information unavailable

Details

Page Title

ok

Scan Type

public

Domain Name Analysis

You're looking at domain 'icloud-jp9.xyz' on the open generic top-level domain (.xyz) while skipping any subdomain. The core label 'icloud-jp9' covers 10 characters holding three vowels versus five consonants, notching 1 digit and one hyphen. Tokenizing the label suggests 4 words: i, cloud, jp, 9. Expect 1.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Br bo

Page Load Overview

10.28s
Total Load Time
2.0 MB
Total Size

Language Analysis

Primary Language

🇰🇷Korean
Code: ko
Confidence:50%
Script:Hangul
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:25 chars
Detector Agreement:100%
Language mismatch: Declared as zh-CN but detected as ko

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5154.213.181.7Tokyo, Tokyo, Japan
AS54801Zillion Network Inc.
3104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
113--

Detected Technologies1

Vue.js
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19E22742645480B2F017BCBA452B9273569BFF65BE61A4090D5EC439C438EFE2E0877B9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Ar9PKGlLDg75isPM8dampUndUgnntbZ3Lg3Kjuj4asshVoE19:Ar9PKG1M75iovoE19

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10007:JQhJoVwjYCkYYUQGkUkeogGAwLyCKEBCZQUEIctEpgi8wLGRsFA8RCEMIgGmEUJCABADATAgGBoRkgK11sASIEPYGCCXtEAD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcf8f8f8f838fff
Perceptual Hash:b8c3c76cc7986493
Difference Hash:c0303030363631c6
Wavelet Hash:cf8f8f8f0f030107
Color Hash:N/A

Other Hashes

Crop Resistant:c0303030363631c6,41014f4f17330f3d

Scan History

Scan history not available

Unable to load historical scan data