appl-2yo[.]pages[.]dev

appl-2yo.pages.dev is a tenant hostname on Cloudflare, not a separately registered domain. PhishDestroy first recorded this hostname on Aug 7, 2026. Stored content metadata identifies Apple as the apparent target. Content analysis also recorded brand signals for Apple id. The stored content classification is impersonation. The assembled evidence scores 100/100 (critical).

Two independent sources are positive: VirusTotal and Google Safe Browsing. On Aug 7, 2026 at 08:41 UTC, VirusTotal recorded 15 detections among 91 engines: BitDefender, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Google Safe Browsing, Gridinsoft, Kaspersky, LevelBlue, Lionic, Netcraft, OpenPhish, VIPRE, Webroot, Yandex Safebrowsing; Google Safe Browsing flagged the domain: Social Engineering. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 18:20 UTC. A URLScan capture is available, but no capture timestamp was recorded.

HTTP 200 was recorded on Aug 7, 2026 at 10:00 UTC. Cloudflare is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 172.66.47.92 (AS13335 Cloudflare, Inc.). The recorded endpoint location is San Francisco, US. This is shared platform infrastructure; the IP and ASN are hosting context, not attribution to unrelated tenants. The stored server header is cloudflare. Captured page title: “Contact - Official Apple”. DOM analysis completed on Aug 7, 2026 at 10:20 UTC; stored DOM score 100/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. The platform TLS certificate was issued by Google Trust Services with validity through Oct 2, 2026; checked Aug 7, 2026 at 10:02 UTC.

Taken together, the page content and independent findings support classifying this hostname as Apple-themed impersonation.