Indicator pay.icloudfx.com Type domain Category SEO Poisoning Confidence medium VT Score 0/94 Source urlscan First Seen 2026-05-26 00:00:44 UTC Last Seen 2026-05-26 16:00:51 UTC urlscan View scan result ↗
Raw JSON
{
  "verdicts": {
    "score": 0,
    "malicious": false,
    "urlscan": {
      "malicious": false
    },
    "engines": {
      "score": 94,
      "malicious": true,
      "hasVerdicts": true,
      "tags": [
        "urlscan-ml",
        "urlscan-ml-60c5e22"
      ]
    }
  },
  "dom": {
    "size": 11021,
    "hash": "23cbb1a03dc3c4f06c4420027161860f2d49f9800724ff2594542d7509ad6692"
  },
  "frames": {
    "length": 1
  },
  "canonical": {
    "task": {
      "url": "pay.icloudfx.com"
    },
    "page": {
      "url": "pay.icloudfx.com/login"
    }
  },
  "screenshot": "https://urlscan.io/screenshots/019e5d67-4690-7548-9826-0defc99cfe1a.png",
  "labels": [
    "content.login"
  ],
  "task": {
    "visibility": "public",
    "method": "automatic",
    "domain": "pay.icloudfx.com",
    "apexDomain": "icloudfx.com",
    "time": "2026-05-25T04:31:55.571Z",
    "source": "certstream-suspicious",
    "uuid": "019e5d67-4690-7548-9826-0defc99cfe1a",
    "url": "https://pay.icloudfx.com/"
  },
  "stats": {
    "uniqIPs": 1,
    "uniqCountries": 1,
    "dataLength": 473131,
    "encodedDataLength": 180534,
    "requests": 11
  },
  "meta": [],
  "scanner": {
    "country": "de"
  },
  "links": {
    "length": 0
  },
  "page": {
    "country": "US",
    "server": "nginx",
    "redirected": "same-domain",
    "ip": "162.252.199.51",
    "apexDomainAgeDays": 1765,
    "language": "en",
    "mimeType": "text/html",
    "title": "Payments",
    "url": "https://pay.icloudfx.com/login",
    "tlsValidDays": 89,
    "tlsAgeDays": 0,
    "domainAgeDays": 0,
    "tlsValidFrom": "2026-05-25T03:31:11.000Z",
    "domain": "pay.icloudfx.com",
    "apexDomain": "icloudfx.com",
    "asnname": "BLNWX - BL Networks, US",
    "asn": "AS399629",
    "tlsIssuer": "E7",
    "status": "200"
  },
  "text": {
    "size": 6378,
    "hash": "3bd87c8c69d76585d17a5e160b6a6ee3fd7d27956e0843510c16a22efc75d9bf"
  },
  "websockets": {
    "totalBytesSent": 0,
    "totalBytesReceived": 0,
    "length": 0
  },
  "usertags": [],
  "_id": "019e5d67-4690-7548-9826-0defc99cfe1a",
  "_score": null,
  "sort": [
    1779683515571,
    "019e5d67-4690-7548-9826-0defc99cfe1a"
  ],
  "image": {
    "size": 7879,
    "width": 1600,
    "hash": "f06537f5dae239737cde8ca75b74fd1f43436ed4c7e4480fd2406fd641dee2f7",
    "height": 1200,
    "aspectratio": 1.33
  },
  "result": "https://urlscan.io/api/v1/result/019e5d67-4690-7548-9826-0defc99cfe1a/"
}

Campaign cluster — 3 pivot-discovered domains

Domain VT Score
connexion-1293.com 15/94
wwwgoredigo-fr.com 1/94
gorediclo-fr.com 2/94