apeterminal-restore[.]pages[.]dev

PhishDestroy identifies apeterminal-restore.pages.dev as a live credential-theft page disguised as an Apple account recovery portal. The site mimics Apple’s branding to trick users into entering their Apple ID and password, which are then harvested by the attackers. This is not a generic phishing scam; it is a targeted attempt to steal Apple credentials, potentially exposing users to financial fraud, unauthorized purchases, or device takeovers if the same password is reused elsewhere. This domain was flagged on Cloudflare Pages and resolves to IP 188.114.97.3 secured by a Google Trust Services SSL certificate. VirusTotal currently shows 0 detections out of 95 engines, indicating it has not yet been widely blacklisted. The site appears to be newly active, leveraging Cloudflare’s free Pages service to host the phishing content without immediate detection. Registrar data confirms Cloudflare, Inc. as the hosting provider, a common choice among threat actors for its anonymity and rapid deployment capabilities. If you visited this site, do not enter any credentials. Close the tab immediately and run a full antivirus scan. Change your Apple ID password from a trusted device using a verified link (appleid.apple.com), and enable two-factor authentication if not already active. Monitor bank accounts and iCloud-connected devices for suspicious activity. Report the domain to Apple and your network administrator to help block future access. Avoid clicking any links from emails or messages claiming to be from Apple unless you initiated contact and verified the source.