Suspicious

Phishings targeting Apple

Suspicious and active websites

Phishings targeting Apple

Suspicious and active websites

Active
11
New (7d)
4
Trend (7d)
↑100%
Website
apple.com
About
AIApple ID phishing targets iCloud / Find My data and is commonly tied to iPhone resale fraud after device theft.
Hosts
Cloudflare, Inc. (4) · Akamai Connected Cloud (2) · SWISSNET LLC (1)
Countries
United StatesUnited States (6) · United KingdomUnited Kingdom (1) · The NetherlandsThe Netherlands (1)
TLS certs
WE1 (2) · YR1 (1) · YE2 (1)

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) ▾ URL Screenshot Flags Details
2026-10-23 05:23 2026-10-23 05:23
https://com.instruction.drive-icloud.com
Screenshot of com.instruction.drive-icloud.com GSB Details
2026-10-23 01:02 2026-10-23 01:02
http://918372-icloud.com/identity/login
Screenshot of 918372-icloud.com OpenPhish Details
2026-10-22 23:30 2026-10-22 23:23
https://www-icloud-mx.help
Screenshot of www-icloud-mx.help GSB Details
2026-10-22 23:30 2026-10-21 23:23
https://icloud-mapsviews.help
Screenshot of icloud-mapsviews.help GSB Details
2026-10-22 23:30 2026-10-14 05:24
https://alerta-appleid.info
Screenshot of alerta-appleid.info GSB Details
2026-10-22 23:30 2026-10-14 05:24
https://appleinc-support.info
Screenshot of appleinc-support.info GSB Details
2026-10-22 23:30 2026-10-02 05:25
https://drive-icloud.com
Screenshot of drive-icloud.com GSB Details
2026-10-22 23:30 2026-09-25 23:26
https://icloudweb-ext860.click
Screenshot of icloudweb-ext860.click GSB Details
2026-10-22 23:30 2026-09-07 05:24
https://buscarmi-icloud.app
Screenshot of buscarmi-icloud.app GSB Details
2026-10-22 23:30 2026-07-28 18:06
http://assign-icloud.com
Screenshot of assign-icloud.com TweetFeed Details
2026-10-22 23:30 2026-07-28 03:05
http://noreply-icloud.app
Screenshot of noreply-icloud.app TweetFeed Details

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL Screenshot Details
https://com.instruction.drive…
GSB 		Screenshot of com.instruction.drive-icloud.com Details
http://918372-icloud.com/iden…
OpenPhish 		Screenshot of 918372-icloud.com Details
https://www-icloud-mx.help
GSB 		Screenshot of www-icloud-mx.help Details
https://icloud-mapsviews.help
GSB 		Screenshot of icloud-mapsviews.help Details
https://alerta-appleid.info
GSB 		Screenshot of alerta-appleid.info Details
https://appleinc-support.info
GSB 		Screenshot of appleinc-support.info Details
https://drive-icloud.com
GSB 		Screenshot of drive-icloud.com Details
https://icloudweb-ext860.click
GSB 		Screenshot of icloudweb-ext860.click Details
https://buscarmi-icloud.app
GSB 		Screenshot of buscarmi-icloud.app Details
http://assign-icloud.com
TweetFeed 		Screenshot of assign-icloud.com Details
http://noreply-icloud.app
TweetFeed 		Screenshot of noreply-icloud.app Details

AIHow to verify a real Apple URL

  • Legitimate Apple URLs always end in apple.com (e.g. www.apple.com, account.apple.com). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not Apple.
  • The padlock icon proves TLS is active, not that the site is safe. Free DV certificates are issued to attackers in minutes; every active site listed above has a valid TLS certificate.
  • If you got the link from email, SMS, or social media, do not click it. Open apple.com from your browser bookmark or type the domain manually.
  • Real Apple pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.