Phishing detection: support-apple.top

Apple
http://support-apple.top Access site
Screenshot
Screenshot of support-apple.top
Investigate
Domain support-apple.top0 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 188.116.36.156
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://support-apple.top
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
19 noiseheuristic risk score · not a probability
Brand + login tokenTweetFeedCountry mismatch
16 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates Apple Support using a combosquatted domain on a .top TLD, hosted in the Netherlands by a provider associated with abuse. A cross-origin form submission exfiltrates entered data to an external server. Confirmed as a known threat by TweetFeed intel.

Cross-origin formBrand + login tokenTweetFeed
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-27 · confidence 85%
Domain & Network
Whois
Registrar NICENIC INTERNATIONAL GROUP CO., LIMITED
Network
IP 188.116.36.156
Country The NetherlandsThe Netherlands
Hosting Host Sailor Ltd
ASN AS60117
TLS Cert -
External detection TweetFeed
CleanGoogle Safe Browsing · OpenPhish · PhishTank · urlscan.io
Report this phishing
Brand owner Apple
reportphishing@apple.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-07-27 16:03 UTC  ·  Last refreshed 2026-07-29 07:30 UTC