icloudweb-ext860.click

Apple

https://icloudweb-ext860.click Access site

Screenshot

Screenshot captured by urlscan.io on 2026-09-25T22:45 UTC: our own render of this page came back blank.

Investigate

Domain icloudweb-ext860.click1 CT host on apex

urlscan

page.domain

VirusTotal

Whois

See every phishunt record for this domain

IP 172.237.129.242

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://icloudweb-ext860.click

urlscan

Wayback

archive.today

Cert -

crt.sh

Censys

Google CT

Phishunt analysis Beta

26 low suspicionheuristic risk score · not a probability

Why?

+6.1 Google Safe Browsing
+5.3 Keyword match
+5.1 Site cluster
+3.0 ASN reputation
+1.3 Suspicious TLD
+1.1 No CSP header
+1.1 No HSTS header
+0.8 Young domain
+0.7 Unrecognised DNS provider
+0.6 Registrar reputation
+0.5 Long domain
+0.1 Hyphens

15 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

This site impersonates Apple's iCloud service through a lookalike domain unrelated to Apple's real infrastructure. It has been flagged by Google Safe Browsing for social engineering and is likely designed to harvest Apple ID login credentials from visitors.

Google Safe BrowsingHigh entropySite cluster

AI-generated from stored detector signals - the AI never visited the site. · 2026-09-26 · confidence 65%

Domain & Network

Whois

Registrar NameSilo, LLC

Network

IP 172.237.129.242

Country