Phishing detection: mail.icloud-ubication.com
Apple Screenshot
Screenshot captured by urlscan.io on 2026-10-06T09:46 UTC: our own render of this page came back blank.
Investigate
Domain
mail.icloud-ubication.com2 CT hosts on apex
urlscan
VirusTotal
Whois
IP
172.238.172.213
ipinfo
Greynoise
URL
https://mail.icloud-ubication.com
Phishunt analysis Beta
23
low suspicionheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +5.1 Site cluster
- +2.9 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.7 Unrecognised DNS provider
- +0.5 Long domain
- +0.2 Suspicious TLD
- +0.1 Hyphens
- +0.1 Deep subdomain
14 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Impersonates Apple iCloud on a lookalike domain with a mail subdomain, likely a fake webmail or location-service login to steal Apple ID credentials. Flagged by Google Safe Browsing as social engineering; hosted on Akamai cloud with no HSTS or CSP.
Google Safe BrowsingKeyword matchNo brand links
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-06 · confidence 75%
Domain & Network
Whois
Registrar
Sav.com, LLC
Network
IP
172.238.172.213 Akamai Linode
Country
United States
United States
Hosting
Akamai Connected Cloud
ASN
AS63949
TLS Cert
-
External detection
Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Brand owner
Apple
Submit to blocklists