aisios[.]com[.]cn

Analysis of the domain aisios.com.cn indicates active impersonation of the legitimate iOS device management tool '爱思助手' (Aisi Assistant). The domain was registered on May 24, 2026, through an undisclosed registrar, with a creation date suggesting recent deployment for malicious purposes. Infrastructure analysis reveals the domain resolves to IP address 188.114.97.3, hosted on Cloudflare infrastructure in Canada, a common tactic to obscure origin and evade takedowns. The site returns an HTTP 200 status, signaling operational availability, and employs a Let's Encrypt SSL certificate (serial number E8), which provides HTTPS encryption but does not validate legitimacy. Detection data from security vendors indicates moderate confidence in malicious classification: 20 of 91 engines flagged the domain on VirusTotal, while PhishDestroy has explicitly blocked it. The domain appears on one additional security blocklist, further corroborating its high-risk status. Gridinsoft assigns a trust score of 0/100, reinforcing the assessment of malicious intent. The page title, '爱思助手官网 - 爱思助手官方下载 - 专业苹果iOS刷机验机及设备管理工具,' explicitly claims affiliation with the legitimate Aisi Assistant brand, suggesting a targeted phishing campaign aimed at Chinese-speaking users seeking iOS device management tools. Technologies detected include Cloudflare and Cloudflare Browser Insights, consistent with modern phishing infrastructure designed to mimic legitimate services while monitoring visitor interactions. The use of HTTP/3 further aligns with current trends in malicious domain deployment. Defenders should prioritize blocking this domain at the DNS and network level, particularly in environments where iOS device management tools are relevant. Further analysis of the site's content and payloads is recommended to determine the exact nature of the phishing mechanism, though no specific payload details are currently available.