Suspicious

Phishings targeting Apple

Suspicious and active websites

Phishings targeting Apple

Suspicious and active websites

Active
18
New (7d)
12
Trend (7d)
↑500%
Website
apple.com
About
AIApple ID phishing targets iCloud / Find My data and is commonly tied to iPhone resale fraud after device theft.
Hosts
Akamai Connected Cloud (8) · Cloudflare, Inc. (4) · Oracle Corporation (2)
Countries
United StatesUnited States (14) · United KingdomUnited Kingdom (1) · The NetherlandsThe Netherlands (1)
TLS certs
Let's Encrypt (1)
Possible campaigns 1 of these is in a suspected cluster 1dedcfa35d5a

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) ▾ URL Screenshot Flags Details
2026-08-03 13:30 2026-08-01 01:01
https://mail.icloud-zr.com/fl26
Screenshot of mail.icloud-zr.com OpenPhish Details
2026-08-03 13:30 2026-07-31 05:46
https://servicio-icloud.com
Screenshot of servicio-icloud.com GSB Details
2026-08-03 13:30 2026-07-31 05:46
https://icloudwebus-ext04.help
Screenshot of icloudwebus-ext04.help GSB Details
2026-08-03 13:30 2026-07-31 05:46
https://icloudwebmx-ext04.help
Screenshot of icloudwebmx-ext04.help GSB Details
2026-08-03 13:30 2026-07-31 05:46
https://support-inc-apple.com
Screenshot of support-inc-apple.com GSB Details
2026-08-03 13:30 2026-07-30 22:13
https://icloud-keychain-customer-service.pages.dev
Screenshot of icloud-keychain-customer-service.pages.dev urlscan Details
2026-08-03 13:30 2026-07-30 05:46
https://icloud-myaccount.com
Screenshot of icloud-myaccount.com GSB Details
2026-08-03 13:30 2026-07-28 18:06
http://assign-icloud.com
Screenshot of assign-icloud.com TweetFeed Details
2026-08-03 13:30 2026-07-28 18:06
http://icloud-network.com
Screenshot of icloud-network.com TweetFeed Details
2026-08-03 13:30 2026-07-28 05:49
https://applebr-alert.info
Screenshot of applebr-alert.info GSB Details
2026-08-03 13:30 2026-07-28 03:05
http://noreply-icloud.app
Screenshot of noreply-icloud.app TweetFeed Details
2026-08-03 13:30 2026-07-27 16:03
http://support-apple.top
Screenshot of support-apple.top TweetFeed Details
2026-08-03 13:30 2026-07-24 05:49
https://icloudwebmx-ext02.help
Screenshot of icloudwebmx-ext02.help GSB Details
2026-08-03 13:30 2026-07-23 05:48
https://icloudrastrear.com
Screenshot of icloudrastrear.com GSB Details
2026-08-03 13:30 2026-07-19 05:48
https://sessions-icloud.com
Screenshot of sessions-icloud.com GSB Details
2026-08-03 13:30 2026-07-12 15:41
https://icloud-location.us
Screenshot of icloud-location.us GSB Details
2026-08-03 13:30 2026-07-12 15:41
https://flnd-icloud.us
Screenshot of flnd-icloud.us GSB Details
2026-08-03 13:30 2026-07-12 15:41
https://applee-alert.life
Screenshot of applee-alert.life GSB Details

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL Screenshot Details
https://mail.icloud-zr.com/fl…
OpenPhish 		Screenshot of mail.icloud-zr.com Details
https://servicio-icloud.com
GSB 		Screenshot of servicio-icloud.com Details
https://icloudwebus-ext04.help
GSB 		Screenshot of icloudwebus-ext04.help Details
https://icloudwebmx-ext04.help
GSB 		Screenshot of icloudwebmx-ext04.help Details
https://support-inc-apple.com
GSB 		Screenshot of support-inc-apple.com Details
https://icloud-keychain-custo…
urlscan 		Screenshot of icloud-keychain-customer-service.pages.dev Details
https://icloud-myaccount.com
GSB 		Screenshot of icloud-myaccount.com Details
http://assign-icloud.com
TweetFeed 		Screenshot of assign-icloud.com Details
http://icloud-network.com
TweetFeed 		Screenshot of icloud-network.com Details
https://applebr-alert.info
GSB 		Screenshot of applebr-alert.info Details
http://noreply-icloud.app
TweetFeed 		Screenshot of noreply-icloud.app Details
http://support-apple.top
TweetFeed 		Screenshot of support-apple.top Details
https://icloudwebmx-ext02.help
GSB 		Screenshot of icloudwebmx-ext02.help Details
https://icloudrastrear.com
GSB 		Screenshot of icloudrastrear.com Details
https://sessions-icloud.com
GSB 		Screenshot of sessions-icloud.com Details
https://icloud-location.us
GSB 		Screenshot of icloud-location.us Details
https://flnd-icloud.us
GSB 		Screenshot of flnd-icloud.us Details
https://applee-alert.life
GSB 		Screenshot of applee-alert.life Details

AIHow to verify a real Apple URL

  • Legitimate Apple URLs always end in apple.com (e.g. www.apple.com, account.apple.com). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not Apple.
  • The padlock icon proves TLS is active, not that the site is safe. Free DV certificates are issued to attackers in minutes; every active site listed above has a valid TLS certificate.
  • If you got the link from email, SMS, or social media, do not click it. Open apple.com from your browser bookmark or type the domain manually.
  • Real Apple pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.