architecture-gateway[.]pages[.]dev

This domain, architecture-gateway.pages.dev, is currently active and impersonating a legitimate Cloudflare authentication portal to harvest user credentials. The infrastructure is designed to mimic official login pages, tricking users into submitting their account details under false pretenses. Analysis indicates the domain is part of a broader credential-harvesting campaign targeting individuals with access to content delivery or web security services. Infrastructure analysis reveals the domain resolves to the IP address 172.66.47.119 and is registered through Cloudflare, Inc. Despite its active status, the domain has not yet been flagged by security vendors, with a VirusTotal detection score of 0/95. No blocklist entries or historical abuse reports were identified at the time of investigation. The lack of prior detections suggests the domain may be newly deployed or employing evasion techniques to avoid automated detection systems. Users who have visited architecture-gateway.pages.dev or entered credentials on the site should immediately revoke any submitted passwords and enable multi-factor authentication on associated accounts. Monitor linked accounts for unauthorized activity, particularly those tied to web hosting, DNS management, or content delivery services. If the domain was accessed via a corporate device or network, report the incident to internal security teams for further analysis. Avoid reusing passwords across platforms, and verify the legitimacy of any unexpected login prompts before submission.