apple-edu-support[.]pages[.]dev

PhishDestroy identifies apple-edu-support.pages.dev as an active brand-impersonation phishing domain targeting Apple users. This site mimics official Apple support pages to trick visitors into revealing login credentials or personal information. The domain was registered through Cloudflare and resolves to IP address 188.114.96.3, which hosts a Let's Encrypt SSL certificate to appear legitimate. Security vendors have not widely flagged this domain, with only 1 out of 95 VirusTotal scanners currently detecting it as malicious. This domain poses a significant risk because it leverages Cloudflare's Pages.dev service, a legitimate platform often used for static websites, to host phishing content. Attackers frequently exploit such services to bypass traditional domain-based blocking mechanisms. The use of a Let's Encrypt SSL certificate further increases the appearance of legitimacy, making it harder for users to distinguish between genuine and fraudulent sites. The domain's name, apple-edu-support.pages.dev, is designed to mislead users into believing it is an official Apple educational support page, a tactic commonly used in credential harvesting campaigns. If you have visited this site and entered any information, immediately change your Apple ID password and enable two-factor authentication. Review your account for any unauthorized activity and revoke any unfamiliar sessions or app permissions. Avoid interacting with any prompts or forms on this site, and do not download any files offered. Report the domain to Apple and your email provider to help prevent further abuse. Always verify the authenticity of support websites by visiting Apple's official site directly or contacting support through verified channels.