Phishing detection: mail.signin-icloud.sa.com
Apple Screenshot
Investigate
Domain
mail.signin-icloud.sa.com1 CT host on apex
urlscan
VirusTotal
Whois
IP
108.167.146.200
ipinfo
Greynoise
URL
https://mail.signin-icloud.sa.com/fl26
Phishunt analysis Beta
30
low suspicionheuristic risk score · not a probability
Keyword matchBrand impersonation in pathOpenPhish
18 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting
Mail subdomain variant of a known iCloud phishing cluster hosted on Oracle infrastructure. Impersonates Apple iCloud sign-in to steal credentials and redirects to the real iCloud domain after interaction. Confirmed malicious by OpenPhish and shares an IP with related phishing pages.
OpenPhishFinal host mismatchBrand impersonation in path
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-11 · confidence 85%
Domain & Network
Whois
Registrar
Sav.com, LLC
Network
Country
United States
United States
Hosting
Oracle Corporation
ASN
AS31898
TLS Cert
-
External detection
OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
Brand owner
Apple
Submit to blocklists