Phishing detection: support-apple-id.shop
Apple Investigate
Domain
support-apple-id.shop1 CT host on apex
IP
104.21.90.113
URL
https://support-apple-id.shop
Cert
YE1
Phishunt analysis Beta
26
low suspicionheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.1 Site cluster
- +4.0 Young domain
- +3.7 Keyword match
- +2.4 ASN reputation
- +0.9 Young certificate
- +0.8 Brand + login token
- +0.7 Brand in cert SAN
- +0.7 Suspicious TLD
- +0.6 Final host mismatch
- +0.4 Long domain
- +0.3 Free CA
- +0.2 Hyphens
17 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Apple ID support lookalike on a newly registered .shop domain behind Cloudflare, with the brand in the certificate. Likely harvests Apple credentials, then redirects to the real iCloud site. Domain is three days old and flagged by Google Safe Browsing.
Brand + login tokenGoogle Safe BrowsingFinal host mismatch
AI-generated from stored detector signals - the AI never visited the site. · 2026-11-04 · confidence 85%
Domain & Network
Whois
Registrar
Sav.com, LLC
Network
IP
104.21.90.113 Cloudflare CDN
Country
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
YE1
External detection
Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise