That is a false flag, cloudfront domains are not malicious.

well it's a CDN so that subdomain could be carrying HTML for a phishing page <:Thinking:1360710341239242762>
maybe there's a template that's trying to coax users into putting their password into a fake site cause i dont think railway uses cloudfront anywhere

It does seem like the actual domain was taken offline as I can't access it anymore but many anti viruses are reporting it

What template were you trying to deploy, can you share the URL?

https://railway.com/new?teamId=5a4df657-61d6-4c17-b69c-a2b561a3dddd

Alright yea nvm its def a false flag, Brody was right

^ its just an image