appie-buscar[.]help

Analysis of appie-buscar.help indicates a brand‑impersonation campaign targeting Apple. The domain was registered on 23 December 2025 through NameSilo, LLC and resolves to IP 67.217.59.86, an address owned by Interserver, Inc. (AS19318) located in the United States. DNS resolution uses three Interserver nameservers (cdns1.interserver.net, cdns2.interserver.net, cdns3.interserver.net). No TLS certificate was presented, so the site operated without HTTPS protection.

The sole page discovered returned a blank title, "Página em Branco," and no additional content has been captured. Reputation services show a Scamadviser trust score of 31 / 100 and a Gridinsoft score of 0 / 100, reflecting a low confidence in legitimacy. The domain appears on one security blocklist and is explicitly blocked by PhishDestroy. VirusTotal scans flagged the domain by 14 of 93 security vendors, confirming malicious indicators across multiple engines.

Current operational status is offline, but historical evidence suggests it was used to lure victims by impersonating Apple‑related services. Defenders should continue to block the domain at perimeter filters, monitor outbound connections to the associated IP address, and add the nameserver pattern to threat‑intel feeds. Because the site content has not been publicly archived, further forensic capture of any landing pages would be valuable to confirm payloads or credential‑harvesting techniques. Until the domain reappears, maintaining the existing blocklist entries and updating detection signatures based on the observed infrastructure is recommended.