Phishing detection: icloud-ayuda-online.help
Apple Screenshot
Screenshot captured by urlscan.io on 2026-10-26T00:35 UTC: our own render of this page came back blank.
Investigate
Domain
icloud-ayuda-online.help1 CT host on apex
urlscan
VirusTotal
Whois
IP
162.4.84.247
ipinfo
Greynoise
URL
https://icloud-ayuda-online.help
Phishunt analysis Beta
30
low suspicionheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +5.1 Site cluster
- +3.5 ASN reputation
- +3.4 Shared IP cluster
- +2.2 Country mismatch
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.7 Unrecognised DNS provider
- +0.6 Registrar reputation
- +0.6 Suspicious TLD
- +0.5 Long domain
- +0.2 Hyphens
16 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Spanish-language fake iCloud support site ('ayuda' means help) on a .help domain that impersonates Apple to harvest account credentials. Flagged by Google Safe Browsing for social engineering and hosted on a poorly reputed Australian ASN.
Google Safe BrowsingKeyword matchASN reputation
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-26 · confidence 80%
Domain & Network
Whois
Registrar
NameSilo, LLC
Network
IP
162.4.84.247
Country
Australia
Australia
Hosting
ParkLogic Pty Ltd
ASN
AS154653
TLS Cert
-
External detection
Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Brand owner
Apple
Submit to blocklists