Phishing detection: mail.icloud-zr.com

Apple
https://mail.icloud-zr.com/fl26 Access site
Screenshot
Screenshot of mail.icloud-zr.com
Investigate
Domain mail.icloud-zr.com1 CT host on apex
urlscan page.domain VirusTotal Whois
IP 108.167.146.200
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://mail.icloud-zr.com/fl26
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
23 low suspicionheuristic risk score · not a probability
Keyword matchBrand impersonation in pathOpenPhish
19 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates Apple iCloud mail under a lookalike domain, redirecting victims through a chain that presents iCloud-branded content. Hosted on Oracle infrastructure with minimal registration status; flagged by OpenPhish.

Final host mismatchBrand impersonation in pathOpenPhish
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-01 · confidence 65%
Domain & Network
Whois
Registrar EuroDNS S.A.
Network
IP 108.167.146.200
Country United StatesUnited States
Hosting Oracle Corporation
ASN AS31898
TLS Cert -
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
Network / ASN Oracle Corporation
abuse_report@oracle.com
Brand owner Apple
reportphishing@apple.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-08-01 01:01 UTC  ·  Last refreshed 2026-08-03 13:30 UTC