en-live-appledgr[.]pages[.]dev

The domain en-live-appledgr.pages.dev was registered through Cloudflare, Inc. on March 28, 2026 and is currently active with an elevated risk rating. DNS resolution points to the IP address 172.66.44.123 and the authoritative nameservers are demi.ns.cloudflare.com and vasilii.ns.cloudflare.com. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, indicating that at least one anti‑phishing organization has observed malicious use. VirusTotal scans show that eight of ninety‑one security vendors flag the domain as malicious, reinforcing the suspicion of abuse.

The listed threat type is brand impersonation targeting Apple, and the intelligence record notes that the domain is used to impersonate the Apple brand. No additional public evidence such as page titles, SSL certificate details, or Safe Browsing verdicts is provided in the current dataset. Consequently, the precise content hosted on the site, the attack vector (e.g., credential‑stealing page), and any associated payloads remain unknown. Defenders should block DNS resolution to 172.66.44.123 and add en‑live‑appledgr.pages.dev to local and network‑level blocklists.

Monitoring of traffic to the Cloudflare nameservers may reveal further infrastructure reuse. Continuous re‑scanning with VirusTotal and inclusion in threat‑intel feeds are recommended to capture any changes in detection rates. Organizations that rely on Apple services should educate users about unsolicited requests that reference Apple and encourage verification of URLs before credential entry.