Is apple-labo.com safe?

No. MalwareAnalyzer scanned apple-labo.com on 21 Aug 2026 and returned a malicious verdict with a score of 83 out of 100, categorised as phishing and credential-harvest. Treat it as hostile until it is re-checked.

How was apple-labo.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

apple-labo.com - malicious URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned apple-labo.com and returned a malicious verdict (score 83), categorised as phishing, credential-harvest. The page resolved to 219.94.163.87 on SAKURA Internet Inc. in JP. The domain was registered 1584 days ago through Japan Registry Services Co., Ltd.. 6 domains and 5 IPs were contacted, over 85 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: malicious (score 83) · Confidence 95%
Scanned URL: https://apple-labo.com/
Domain: apple-labo.com · IP: 219.94.163.87 · AS9371 · JP
Server: nginx
Page title: アップル滅菌センター公式ウェブサイト
HTTP status: 200 · text/html; charset=UTF-8
Registrar: Japan Registry Services Co., Ltd. · domain age 1584 days · created 2022-04-20
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Nov 17 22: · subject CN=apple-labo.com
HTTP requests captured: 85 · cookies set: 3 · outgoing links: 17
Scan tier: standard · observed 2026-08-21 02:56:11 UTC

Antivirus & YARA (1 of 47 engines)

YARA: SophosLabs IoCs (public) [yara]: SOPHOS_Gootloader_JS (page content)

Why this verdict

Antivirus/YARA detection in page content: SOPHOS_Gootloader_JS
Domain impersonates apple (combosquat)
Credential-harvesting form
Certificate issued < 48h ago

Detected technologies

Nginx
Google Analytics

Contacted infrastructure

219.94.163.87 - AS9371 SAKURA Internet Inc. (Japan)
142.251.222.8 - AS15169 Google LLC (Japan)
142.250.195.163 - AS15169 Google LLC (India)
172.217.25.174 - AS15169 Google LLC (Japan)

Observed indicators

apple-labo.com
fonts.googleapis.com
fonts.gstatic.com
www.googletagmanager.com
www.google.com
www.google-analytics.com
219.94.163.87
142.250.183.42
142.251.222.8
142.250.195.163
172.217.25.174
https://apple-labo.com/
https://apple-labo.com/favicon/favicon.ico
https://apple-labo.com/favicon/favicon.svg
https://apple-labo.com/favicon/apple-touch-icon.png
https://apple-labo.com/favicon/manifest.webmanifest
https://fonts.googleapis.com/
https://fonts.gstatic.com/
https://fonts.googleapis.com/css2?family=Noto+Sans+JP:wght@400;500;700&display=swap
https://fonts.googleapis.com/css2?family=ABeeZee:ital@1&display=swap

Questions about apple-labo.com

Is apple-labo.com safe?: No. MalwareAnalyzer scanned apple-labo.com on 21 Aug 2026 and returned a malicious verdict with a score of 83 out of 100, categorised as phishing and credential-harvest. Treat it as hostile until it is re-checked.
How was apple-labo.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of apple-labo.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan