Phishing detection: tickets-icloud-apple.com

Apple
https://tickets-icloud-apple.com Access site
Screenshot
No screenshot available yet Captured automatically on the next refresh cycle
Investigate
URL https://tickets-icloud-apple.com
Phishunt analysis Beta
29 low suspicionheuristic risk score · not a probability
Why?
  • +6.1 Google Safe Browsing
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +4.0 Young domain
  • +2.3 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.9 Young certificate
  • +0.9 No registrar lock
  • +0.7 Brand in cert SAN
  • +0.5 Long domain
  • +0.3 Free CA
  • +0.2 Hyphens
  • +0.2 Suspicious TLD
17 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Apple/iCloud lookalike domain combining the brand names with 'tickets', registered the same day, with a certificate naming the brand and minimal domain status. Behind Cloudflare and flagged by Google Safe Browsing, likely harvesting Apple ID credentials.

Young domainBrand in cert SANGoogle Safe Browsing
AI-generated from stored detector signals - the AI never visited the site. · 2026-11-11 · confidence 75%
Domain & Network
Whois
Network
IP 172.67.193.127 Cloudflare CDN
Country United StatesUnited States
ASN AS13335
TLS Cert YE2
External detection Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Report this phishing
Network / ASN Cloudflare, Inc.

Tracked from 2026-11-10 23:21 UTC  ·  Last refreshed 2026-11-12 11:30 UTC