public company · US

Apple

Apple Inc.

Consumer electronics and services.

Primary official domain
apple.com
Reviewed official domains
2 (directory review; organization has not verified)
Directory source
BreachScout directory · Suggest a correction
Matching domains, 30 days
60
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
2
domains first source-reported within 30 days
First observed, 30 days
65
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC quarantine
SPF ~all · 2/10 lookups · Mail: Not checked · checked 2026-10-19 · published policy

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
appleidicloud
Label aliases
Apple ID · iCloud · Apple
Official domains
apple.com · icloud.com (all)
Generated spellings
285 tracked · 157 observed somewhere · 128 not observed (all)

Matching domains with source reports or listings

Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.

Domain / hostnameSource claimCompany match (DomainSpoof)Date (mixed basis)Latest DNSSources / recordsFinding details
iclouddispositivo[.]usMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive31.148.99.121checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
icloudfind[.]liveMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
iconerp[.]icloudjo[.]comMail: MX · via icloudjo.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.20.41172.67.191.822606:4700:3032::6815:14292606:4700:3034::ac43:bf52checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
icloudmail[.]liveMail: MXSPFDMARC · via cloudflare.net · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.77.57172.67.204.2152606:4700:3034::ac43:ccd72606:4700:3037::6815:4d39checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
icloudmapa[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.58.28172.67.198.2422606:4700:3031::6815:3a1c2606:4700:3031::ac43:c6f2checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
icloudmapa[.]netMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
icloudmex-lost[.]comMail: MXSPF · via eye-mail.net · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive172.237.129.108172.237.129.236172.237.129.242checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
icloudnet[.]infoMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive31.148.99.121checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
icloudocs[.]comMail: MXSPF · via above.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive103.224.212.142checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
icloudoficial[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
icloudsite[.]supportMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
icloudsupport[.]co[.]ukMail: MXSPF · via outlook.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.20.22172.67.190.2182606:4700:3036::6815:14162606:4700:3037::ac43:bedachecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
icloudweb-ext860[.]clickMail: MXSPF · via eye-mail.net · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive172.237.129.108172.237.129.236172.237.129.242checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
icloudwebmx-ext04[.]helpMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
imagens-icloud[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
inc-icloud[.]supportMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
inc-icloudlocation[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive31.148.99.121checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
keep-icloud[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.91.118172.67.217.1342606:4700:3030::6815:5b762606:4700:3034::ac43:d986checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
icloudphotos[.]litong5969[.]workMail: MXSPFDMARC · via litong5969.work · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive24.79.111.216checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
magicloud[.]blogMail: MXSPFDMARC · via magicloud.blog · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive95.175.103.103checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
mapaicloud[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
maps-icloud[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
00m-i-cloud[.]mipaginaweb[.]usMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-18 20:49 UTC
1 source · 1 recordDetails
oficial-icloud[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
onlineicloud[.]supportMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails

A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.