Security Scan Report: 918372-icloud.com

Redirected to:
https://918372-icloud.com/signin/identifier?_g=tnczfl.304f6c0185ea
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 9 HTTP transactions. The main domain is 918372-icloud.com and was registered 5 days ago.

Submitted URL: http://918372-icloud.com/identity/login

Effective URL:
https://918372-icloud.com/signin/identifier?_g=tnczfl.304f6c0185ea
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Fake iCloud login on a 4-day-old lookalike domain impersonating Apple, confirmed by Safe Browsing social engineering and a HIGH phishing IDS alert - do not enter credentials.

Risk Factors (6)
Impersonation of Apple's iCloud brand on an unrelated, newly registered domain
Credential-collection login flow (Apple Account email capture) hosted on the lookalike domain
Google Safe Browsing social-engineering detection
HIGH-severity IDS phishing alert specific to iCloud
Domain registered 4 days ago and absent from Cisco Umbrella rankings
Threat-intel report of phishing on the primary domain
Domain age information unavailable

Details

Page Title

iCloud

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), '918372-icloud.com' is registered. The second-level label '918372-icloud' is 13 characters long containing three vowels alongside three consonants; bonus characters include 6 digits and 1 hyphen. Breaking it apart gives three words: 918372, i, cloud. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://918372-icloud.com/identity/login

Page Load Overview

2.38s
Total Load Time
191 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:568 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software59% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
59%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9179.43.182.228Rümlang, Zurich, Switzerland
AS51852Private Layer INC
91--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18ED4AF7A4A503FA625339E2250D8799A8F219453EF32DD5EF98543E403CF84A5B3EB34

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:0w5UK5U/5Ur95XlppFsLEX/LnEFt0hLqapnKKh9Ps/IXDolU5FOy01egcHvK6O8C:U1ezrdQSM1MCNdFF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:641278:CKVCKg8XEBJBwqrIgUAkIgDogsrcQQJw1IBQAzkihFCyFBMkItFikE1tIhC0BEEgQwBosojSQDnqhQWOLqEkgoRFkUOBSGQE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7ee7e7e7e7e7ff00
Perceptual Hash:f7b38cf508cc2233
Difference Hash:94080e0e0c0e0032
Wavelet Hash:42e6e6e6e6e6e600
Color Hash:#d22d9b

Other Hashes

Crop Resistant:94080e0e0c0e0032

Scan History

Scan history not available

Unable to load historical scan data