iosemus[.]pages[.]dev

This domain, iosemus.pages.dev, is currently under investigation for phishing activity targeting users seeking modified iOS applications. Analysis indicates the site presents itself as an 'iOSEmus App Store (iPhone Exclusive) Unlimited Game Mods,' as evidenced by the page title. The domain was registered on October 8, 2023, through Cloudflare, Inc., and remains active as of July 12, 2026. Infrastructure analysis reveals it resolves to the IP address 172.66.44.75, hosted on AS13335 (Cloudflare, Inc.) in the United States, with nameservers rafe.ns.cloudflare.com and terry.ns.cloudflare.com. The domain has been flagged by at least one security blocklist, and its trust score is 0/100, suggesting potential malicious intent. Detected technologies include WordPress, MySQL, PHP, and Cloudflare Browser Insights, which may be leveraged to facilitate the phishing operation. The SSL certificate is issued by Google Trust Services (WE1), a common practice among both legitimate and malicious sites to establish encrypted connections. While no detections were reported by the 91 vendors that scanned the domain, this absence does not confirm safety. Defenders should treat this domain as a potential threat, particularly given its association with unauthorized app distribution, which often involves credential harvesting or malware delivery. Network-level blocking is recommended for organizations, and users should be cautioned against interacting with the site or downloading any content. Further analysis of the site's payload and backend infrastructure is advised to determine the full scope of the threat.