ahje-r5[.]pages[.]dev
“Apple Customer Service”
ahje-r5.pages.dev — 可达 · 访问受限 (HTTP 403). 品牌冒充:Apple; 诈骗类型:Brand Impersonation. 证据摘要: VirusTotal 0/94; PhishDestroy score 45/100. 注册商: Cloudflare.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
ahje-r5.pages.dev has been flagged for hosting a generic phishing page with suspected cryptocurrency drainer functionality. This domain, registered through Cloudflare, Inc., leverages Google Trust Services’ SSL certificate to appear legitimate. Based on available intelligence, the threat appears to involve deceptive redirection or credential harvesting, though specific drainer kit signatures remain unverified. The phishing page mimics a generic service or platform, lacking clear brand impersonation. Further behavioral analysis is required to confirm payload delivery mechanisms, such as clipboard hijacking or fake wallet transaction prompts. Given the domain’s active status and low detection rate, caution is advised when interacting with this URL.
This domain resolves to IP 188.114.96.3 and shows a VirusTotal detection score of 0/95, indicating no active flags from security vendors as of the latest scan. The domain is registered through Cloudflare, Inc., with an SSL certificate issued by Google Trust Services, potentially increasing user trust. Creation date and additional metadata remain unverified due to Cloudflare’s privacy protections. The lack of detections suggests either a newly deployed threat or evasion tactics such as rapid domain rotation. Blocklist counts and historical reputation data are unavailable at this time, leaving the domain’s true threat profile ambiguous.
As of this assessment, ahje-r5.pages.dev remains active and under investigation. No immediate takedown actions have been recorded, and the domain continues to operate without significant vendor detections. Users are strongly advised to avoid interacting with this domain until further analysis is completed. Remaining risk is classified as high due to the potential for cryptocurrency theft and the domain’s ability to evade detection systems. Immediate mitigation steps include DNS blocking via threat intelligence platforms and user-facing warnings. Continued monitoring for payload signatures and domain behavior is critical to assess evolving threats.
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 4 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web analytics service tracking website traffic and user behavior.
marketingplatform.google.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of ahje-r5.pages.dev · checked Apr 20, 2026
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。