Security Scan: iCloud

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c9741581-6c1f-46ce-a21a-160668451bca Domain and IP registration (RDAP)/api/v1/rdap/c9741581-6c1f-46ce-a21a-160668451bcaHow often this domain was scanned/api/v1/domain/stats/tangerine-lolly-8226b4.netlify.app Scan history for this domain/api/v1/domain/history/tangerine-lolly-8226b4.netlify.app?limit=15

This website contacted 4 IPs in 2 countries across 3 domains to perform 4 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://tangerine-lolly-8226b4.netlify.app/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Confirmed iCloud/Apple credential phishing kit on a free Netlify subdomain: fake Apple ID login capturing password and verification codes, flagged by Safe Browsing and IDS, with a Telegram bot token wired to exfiltrate the data.

Risk Factors (6)

Apple brand impersonation on an unrelated, unranked Netlify subdomain

Credential-harvesting login form (password + username fields) on a shared hosting subdomain of unknown creation date

Two-factor / verification-code capture flow impersonating Apple's sign-in

Google Safe Browsing social-engineering verdict

IDS HIGH phishing alert for an iCloud landing

Inline Telegram bot token enabling exfiltration of submitted data to a chat controlled by the page operator

Domain age information unavailable

Details

Page Title

iCloud

Scan Type

public

Favicon Hash

MMH3: -1742728723

MD5: e0dc6025f3ad91101529eaab3879cf79

Domain Name Analysis

The domain name 'tangerine-lolly-8226b4.netlify.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'tangerine-lolly-8226b4'. The registrable portion 'netlify' spans 7 characters split between two vowels and five consonants. Tokenizing the label suggests three words: net, li, fy. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

/ כניסה באמצעות חשבון ‎Apple‏ דואר אלקטרוני או מספר טלפון סיסמה המשך yy ‏הנתונים‎

Page Load Overview

0.54s

Total Load Time

126 KB

Total Size

Language Analysis

Primary Language

🇮🇱Hebrew

Code: he

Confidence:80%

Script:Hebrew

Direction:rtl

Detection Details

HTML Lang Attribute:he

Text Length:185 chars

Detector Agreement:50%

Website Classification

Primary Category

technology software62% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

62%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	185.15.59.240	United States	AS14907Wikimedia Foundation Inc.
1	23.36.157.47Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
4	4	-	-