pay.icloudfx.com
SEO Poisoning Indicator pay.icloudfx.com Type domain Category SEO Poisoning Confidence medium VT Score 0/94 Source urlscan First Seen 2026-05-26 00:00:44 UTC Last Seen 2026-05-26 16:00:51 UTC urlscan View scan result ↗
Raw JSON
{
"verdicts": {
"score": 0,
"malicious": false,
"urlscan": {
"malicious": false
},
"engines": {
"score": 94,
"malicious": true,
"hasVerdicts": true,
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
]
}
},
"dom": {
"size": 11021,
"hash": "23cbb1a03dc3c4f06c4420027161860f2d49f9800724ff2594542d7509ad6692"
},
"frames": {
"length": 1
},
"canonical": {
"task": {
"url": "pay.icloudfx.com"
},
"page": {
"url": "pay.icloudfx.com/login"
}
},
"screenshot": "https://urlscan.io/screenshots/019e5d67-4690-7548-9826-0defc99cfe1a.png",
"labels": [
"content.login"
],
"task": {
"visibility": "public",
"method": "automatic",
"domain": "pay.icloudfx.com",
"apexDomain": "icloudfx.com",
"time": "2026-05-25T04:31:55.571Z",
"source": "certstream-suspicious",
"uuid": "019e5d67-4690-7548-9826-0defc99cfe1a",
"url": "https://pay.icloudfx.com/"
},
"stats": {
"uniqIPs": 1,
"uniqCountries": 1,
"dataLength": 473131,
"encodedDataLength": 180534,
"requests": 11
},
"meta": [],
"scanner": {
"country": "de"
},
"links": {
"length": 0
},
"page": {
"country": "US",
"server": "nginx",
"redirected": "same-domain",
"ip": "162.252.199.51",
"apexDomainAgeDays": 1765,
"language": "en",
"mimeType": "text/html",
"title": "Payments",
"url": "https://pay.icloudfx.com/login",
"tlsValidDays": 89,
"tlsAgeDays": 0,
"domainAgeDays": 0,
"tlsValidFrom": "2026-05-25T03:31:11.000Z",
"domain": "pay.icloudfx.com",
"apexDomain": "icloudfx.com",
"asnname": "BLNWX - BL Networks, US",
"asn": "AS399629",
"tlsIssuer": "E7",
"status": "200"
},
"text": {
"size": 6378,
"hash": "3bd87c8c69d76585d17a5e160b6a6ee3fd7d27956e0843510c16a22efc75d9bf"
},
"websockets": {
"totalBytesSent": 0,
"totalBytesReceived": 0,
"length": 0
},
"usertags": [],
"_id": "019e5d67-4690-7548-9826-0defc99cfe1a",
"_score": null,
"sort": [
1779683515571,
"019e5d67-4690-7548-9826-0defc99cfe1a"
],
"image": {
"size": 7879,
"width": 1600,
"hash": "f06537f5dae239737cde8ca75b74fd1f43436ed4c7e4480fd2406fd641dee2f7",
"height": 1200,
"aspectratio": 1.33
},
"result": "https://urlscan.io/api/v1/result/019e5d67-4690-7548-9826-0defc99cfe1a/"
} Campaign cluster — 3 pivot-discovered domains
| Domain | VT Score |
|---|---|
| connexion-1293.com | 15/94 |
| wwwgoredigo-fr.com | 1/94 |
| gorediclo-fr.com | 2/94 |