Security Scan Report: signin-appleid.com

Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 3 domains to perform 14 HTTP transactions. The main domain is signin-appleid.com and was registered 2 days ago.

Submitted URL: https://signin-appleid.com/

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Fake Apple sign-in portal on the 2-day-old domain signin-appleid.com, using Apple Inc. branding and an email/Continue form to start credential harvesting. Do not enter any account details.

Risk Factors (6)
Brand impersonation of Apple on an unrelated, newly registered domain
Typosquatting/deceptive hostname (signin-appleid.com) mimicking an Apple ID login endpoint
Email-collection 'Continue' form consistent with staged credential harvesting
Domain only 2 days old, unranked and with minimal legitimacy signals (score 20/100)
Circular redirect and obfuscation-style inline encoding functions on a placeholder page
Informational only: IDS hunting alert for a gate.php request without referer
Domain age information unavailable

Details

Page Title

Loading

Scan Type

public

Domain Name Analysis

Domain 'signin-appleid.com' uses the commercial generic top-level domain (.com). Its registrable label 'signin-appleid' stretches across 14 characters holding five vowels versus eight consonants; bonus characters include one hyphen. Word splitting yields 4 words: sign, in, apple, id. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://signin-appleid.com/

Page Load Overview

0.38s
Total Load Time
40 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:148 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software51% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
51%
corporate business
39%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6172.67.216.85Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.86.62Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.250.154.95Google · CDNUnited States
AS15169Google LLC
2104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
145--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T115E2E836366111267873F62C67DB9549B131B003F405CAA4B99CB218CFCDAE586F6EF8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:dWrCTxtdRm3RbrxOA1fUTlmBlRBVXWbYX/8KxSHsh8rHugqB/:dWrCTxtdRmpMA1fUTlUHXSYXD2Y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:33943:gsCobKFDAlURkGpgCY0IK1MgzLVAAgkYYgfikhTAyQSAiBLBCQoHpIYQbBhQggDpYAwxkNMgGAXBWtBigkKjIqBVkBIIEVYi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000f8ffffffc3c3
Perceptual Hash:e94966279b9c961c
Difference Hash:03033132300e0f0f
Wavelet Hash:000018ffffe7c3c3
Color Hash:#add279

Other Hashes

Crop Resistant:03033132300e0f0f

Scan History

Scan history not available

Unable to load historical scan data