Skip to security report
Domain security and threat intelligence
applebyjewels.shop favicon

applebyjewels.shop

“applebyjewels.shop”

Registrar
Dynadot
Resolved IP
46.245.239.187
Registered
May 23, 2026
Threat verdict Critical
Availability Last known active Previously unavailable; the latest observation was reachable
VirusTotal detections: 11/91 Brand impersonation: Apple
OTX: 1 ref Oct 2, 2026 Apple
API
This domain has been flagged as malicious
Security engines reporting a detection: 11. Exercise extreme caution — do not enter credentials or personal information.
VirusTotal
VirusTotal
11 det.
OTX references
URLScan
URLScan
TLS Certificate
Expired or unverified
Age
4 mo
Observed status
Last known active 200
PhishDestroy
DestroyList
Listed

Source evidence

6 sources

VirusTotal

11 / 91

Report

URLScan verdict

malicious

Report

OTX

1 community reference

Report

CF Radar

provider verdict: clean

Report

URLScan capture

stored report

Report

Google Safe Browsing

Checked; no threat flag recorded

Report

Evidence Summary

Critical
VirusTotal
11/91
OTX
1 community ref
URLScan
Stored capture

Assessment

On 2026-10-02, applebyjewels.shop was recorded in a VirusTotal scan with 11 detections across 91 scanners. The same date also carries an OTX pulse count of 1 and a PhishDestroy internal listing for this domain.

Recorded Evidence

VirusTotal recorded 11 detections out of 91 scanners for applebyjewels.shop on 2026-10-02. OTX showed 1 pulse for the domain on 2026-10-02. The PhishDestroy internal listing was recorded as true on 2026-10-02. The domain resolved to IP address 46.245.239.187 on 2026-10-02.

Interpretation

The VirusTotal detections and total scanners describe scanner agreement at the recorded time, not a confirmed outcome. The OTX pulse count and PhishDestroy listing are separate source records that each contribute their own observation. Because all recorded dates fall on the same calendar day, the evidence does not establish a sequence or trend across time.

Recommended Actions

Preserve the VirusTotal record for applebyjewels.shop and the OTX record for applebyjewels.shop as separate source documents. Compare the PhishDestroy internal listing against the VirusTotal detections when reviewing this domain. Retain the recorded IP observation alongside those source records for future reference.

Detection-evasion analysis

Cloaking suspected: scanner and visitor titles differ

Not yet scanned No crawler-versus-browser difference has been recorded yet

Stored crawler-versus-browser observations for this host, plus a live fingerprint check for Keitaro-style traffic distribution systems.

Stored cloaking flag
Not yet scanned
Last cloaking scan

Scanner note: suspended: raw=suspended; http=200; via=https_proxy

Title shown to the security scannerEngagement Rings - Exquisite Diamond Jewellery | Appleby
Title shown to a browser visitorapplebyjewels.shop
Live TDS fingerprint check
Seven Keitaro fingerprints plus a crawler-versus-browser comparison, run from the PhishDestroy scanner when this panel is open.
Waiting

Stored Capture · 1 capture

Page Title
applebyjewels.shop
TLS Certificate
Hostname coverage not recorded · Issued by YE2

Domain details

Domain
URLScan Verdict Malicious score 100 Phishing brand: Fakeshop report ↗
IP Reputation abuse score 0/100 0 reports checked Oct 2, 2026
OTX Tags blocklistcryptodrainerfraudphishdestroyphishingscam
Registrar Dynadot US(US)
RegistrationCreated May 23, 2026 (133d)
Elapsed Since First Report 14h
What we count Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Last known active.
What each report contains Stored outgoing-report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
HTTP Status200
Technical detailsProvenance & timestamps
First DetectedOct 2, 2026
Submitted URLhttp://applebyjewels.shop/
Favicon Hash
ICANN OVERSIGHT

Accreditation and RAA context

Registrar accreditation and DNS abuse obligations

For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Accountability draft Nothing is sent automatically.

Network & certificates

Stored technical evidence

Network & DNS

Resolved IP
46.245.239.187
Network ASN
AS199242
Organization
Malakmadze Web LLC
Observed location
Los Angeles, US

Nameservers 1

  • odin.ns.cloudflare.com

Location describes the IP network.

TLS certificate

Issuer
YE2
Hostname coverage
Hostname coverage not recorded
Collection source
PhishDestroy collector

Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.

viewdns.info · 46.245.239.187rapiddns.io

Latest Classified Outcome 2026-10-03 10:14:51 UTC

Primary outcome Inactive reason: Hosting Account Suspended 60% confidence
Attribution actor class: Hosting mechanism: Suspension Page source: Current Http Probe
Evidence layers Availability: Non Threat Content Content: Replaced Or Parked DNS: Resolved Registration: Unknown
Latest HTTP observation Inactive Hosting Account Suspended actor class: Hosting Suspension Page 60% 2026-10-03 10:14:51 UTC
RDAP registration Unknown
Observed timeline current episode first observed: 2026-10-03 10:14:51 UTC first terminal observation: 2026-10-03 10:14:51 UTC
Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.
Report This Domain Submit evidence & help protect others

VirusTotal Analysis

11 / 91 security vendors flagged this domain
View on VT
Last analyzed Previous stored snapshot: 11 detections
alphaMountain.ai
BitDefender
CyRadar
ESET
Forcepoint ThreatSeeker
Fortinet
Gridinsoft
Lionic
Netcraft
Sophos
VIPRE

Forensic History & Detection Timeline

ThreatLifecycleTelemetry
This timeline displays historical security and status checkpoints observed by the PhishDestroy automated monitoring network. It records domain lifecycle updates, scanner changes, and threat telemetry over time.
  1. Domain Status Transition 2026-10-03 10:14:51 UTC
    Domain state transitioned from alive to dead.
  2. Threat First Observed 2026-10-02 19:21:24 UTC
    Domain ingestion complete. Initial state is marked as unknown pointing to IP 46.245.239.187.

Threat Response Pipeline

Discovery
Analysis
Monitoring

10 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.

Evidence & External Reports

Deep Analysis

Were You Affected by This Site?

If credentials were compromised, report immediately. Do not engage with recovery scammers.

If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.

Europol
Find the official reporting channel for your EU country
National police directory
Beware of recovery scammers! Recovery scammers may pose as investigators, lawyers, or tracing services. Do not pay upfront fees or disclose credentials. Learn more about recovery fraud →

Report to Your Local Authorities

Select your country to get official cybercrime contacts, or create a complaint draft →.

97-country directory

Template-based draft · optional AI wording assistance requires separate consent

Template-based draft • optional AI wording assistance requires separate consent · Review and submit it yourself

Check Any Domain

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Scan Now

Report Phishing

Submit suspicious domains to our threat database — protect the community

Report

Live Threat Feed

Recent phishing reports and observed availability changes

Monitor

Stay Informed, Stay Safe

Monitor live threats or contest this listing if you believe it's a false positive

Live Threat Feed Appeal This Listing
HTML · IFRAME

Embed This Report

Share this threat intelligence on your website or blog

embed.html
<iframe
  src="https://phishdestroy.io/embed/domain/applebyjewels.shop"
  title="PhishDestroy threat report for applebyjewels.shop"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>