Phishing detection: support-apple-id.shop

Apple
https://support-apple-id.shop Access site
Screenshot
Screenshot of support-apple-id.shop
Investigate
URL https://support-apple-id.shop
Phishunt analysis Beta
26 low suspicionheuristic risk score · not a probability
Why?
  • +6.1 Google Safe Browsing
  • +5.1 Site cluster
  • +4.0 Young domain
  • +3.7 Keyword match
  • +2.4 ASN reputation
  • +0.9 Young certificate
  • +0.8 Brand + login token
  • +0.7 Brand in cert SAN
  • +0.7 Suspicious TLD
  • +0.6 Final host mismatch
  • +0.4 Long domain
  • +0.3 Free CA
  • +0.2 Hyphens
17 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Apple ID support lookalike on a newly registered .shop domain behind Cloudflare, with the brand in the certificate. Likely harvests Apple credentials, then redirects to the real iCloud site. Domain is three days old and flagged by Google Safe Browsing.

Brand + login tokenGoogle Safe BrowsingFinal host mismatch
AI-generated from stored detector signals - the AI never visited the site. · 2026-11-04 · confidence 85%
Domain & Network
Whois
Registrar Sav.com, LLC
Network
IP 104.21.90.113 Cloudflare CDN
Country United StatesUnited States
ASN AS13335
TLS Cert YE1
External detection Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Report this phishing
Network / ASN Cloudflare, Inc.
Registrar Sav.com, LLC

Tracked from 2026-11-03 23:19 UTC  ·  Last refreshed 2026-11-09 23:30 UTC