ef8374iuygewbhcds[.]pages[.]dev

The domain ef8374iuygewbhcds.pages.dev was created on February 21, 2026 and is hosted behind Cloudflare, Inc. infrastructure, resolving to the IP address 188.114.97.3, which is assigned to AS13335 in the United States. No TLS certificate is presented, indicating that the site was served over plain HTTP. The page title observed before takedown reads "Contact | Official Apple Helpline," and the site was classified as a Tech Support Scam that impersonates Apple. The domain has been taken offline and is currently blocked by the PhishDestroy mitigation platform.

VirusTotal analysis shows that two of ninety‑three scanning engines flagged the domain, providing limited but concrete detection evidence. Additionally, the domain appears on a single external security blocklist, confirming that at least one independent threat intelligence source has identified it as malicious. Because the site is no longer reachable, content‑level verification cannot be performed, leaving the exact phishing payload and user‑interaction mechanics uncertain.

Defenders should continue to enforce URL filtering for the exact host name, add the IP address 188.114.97.3 to network‑level blocklists, and monitor Cloudflare‑associated traffic for similar patterns. Regular checks of VirusTotal and other multi‑engine scanners are advisable to capture any future re‑hosting attempts. Given the brand‑impersonation nature of the campaign, organizations should also educate users about unsolicited Apple‑related support calls and reinforce policies that prohibit the sharing of credentials with unverified support channels.