myapple[.]webflow[.]io

This domain, myapple.webflow.io, is actively flagged as a high-risk brand impersonation threat targeting Apple. Infrastructure analysis reveals the domain is hosted on Cloudflare infrastructure (IP 172.64.151.8, AS13335) and uses Cloudflare nameservers (journey.ns.cloudflare.com, lamar.ns.cloudflare.com). The domain was created on May 8, 2013, though its current malicious use appears to be recent, as indicated by active security vendor detections. The page title 'Apple Clone' and known intelligence classify this as a tech support scam, a common tactic for brand impersonation schemes. The domain returns an HTTP 200 status, indicating an operational webpage, and is served with a valid SSL certificate issued by Google Trust Services. Security vendors have flagged this domain for social engineering, with 17 of 95 engines on VirusTotal detecting it as malicious. It is blocked by multiple security blocklists, including PhishDestroy and PhishingDB, and has a trust score of 0/100 from Gridinsoft. The use of Webflow, Google Hosted Libraries, and Cloudflare technologies suggests a structured phishing kit rather than a hastily deployed scam. While the domain's registration date predates its malicious use, this is not uncommon for repurposed domains. Defenders should treat this domain as an active threat, particularly given its association with tech support scams and brand impersonation. No evidence suggests the domain is compromised rather than malicious by design. Network-level blocking and monitoring of associated infrastructure (Cloudflare IP range, nameservers) are recommended to mitigate further abuse.