pg-78480947-znjz8e[.]pages[.]dev

This domain, pg-78480947-znjz8e.pages.dev, is flagged as a high-risk brand impersonation resource specifically targeting Gmail users. Analysis of the page title reveals an exact replica of the legitimate Google interface, indicating an intent to deceive users into disclosing credentials or other sensitive information. No associated drainer kit signatures have been identified at this time, though the domain exhibits classic characteristics of credential harvesting infrastructure. Infrastructure analysis reveals the following technical indicators: the domain was registered on November 19, 2025, through Cloudflare, Inc. and currently resolves to the IP address 142.250.185.132, geolocated within the United States under autonomous system AS15169 (Google LLC). The SSL certificate is issued by Google Trust Services (WE1), which may contribute to the domain's superficial legitimacy. Detection metrics show a VirusTotal score of 3/95 security vendors, while only one security blocklist has flagged the domain to date. Google Safe Browsing status remains unconfirmed in available data. As of the latest verification, pg-78480947-znjz8e.pages.dev remains active and continues to host the impersonation content. Immediate response actions are recommended, including domain takedown requests to the registrar and hosting provider, as well as updates to endpoint protection systems to block the IP and associated indicators. Despite partial detection, the domain poses a persistent risk due to its operational status and targeted nature. Users should exercise heightened caution, verify URLs before authentication, and report any suspicious login prompts to their security teams.