stellar-compute-site[.]pages[.]dev

This domain is flagged as a brand impersonation threat targeting Cloudflare users. Analysis indicates the site was designed to replicate Cloudflare’s authentication interface, likely to harvest credentials or deploy malicious payloads. The page title explicitly reads 'Suspected phishing site | Cloudflare,' suggesting self-acknowledged malicious intent or automated detection by hosting infrastructure. Such impersonation schemes often exploit trust in legitimate services to deceive users into divulging sensitive information or installing unauthorized software. Infrastructure analysis reveals several technical indicators supporting the phishing classification. The domain was registered on June 30, 2025, through Cloudflare, Inc., and resolves to the IP address 198.18.1.23. Despite leveraging Cloudflare’s hosting and security features—including HSTS and HTTP/3—the site appears on one security blocklist and is currently blocked by PhishDestroy. VirusTotal reports zero detections out of 95 engines, indicating the threat may still be undetected by many security tools. The SSL certificate is issued by Google Trust Services, adding a layer of legitimacy that could mislead users. Users who visited stellar-compute-site.pages.dev should take immediate action to mitigate potential risks. First, revoke any credentials entered on the site and enable multi-factor authentication on all accounts. Monitor linked accounts for unauthorized activity, particularly those associated with Cloudflare or other cloud services. If the site was accessed from a corporate device, report the incident to internal security teams for further investigation. Given the domain’s recent creation and low detection rate, assume any interaction with the site may have exposed sensitive data and act accordingly.