wins-bam[.]pages[.]dev

wins-bam.pages.dev is a credential-harvesting phishing page currently under active analysis by PhishDestroy. The page mimics legitimate login portals to trick users into surrendering passwords and financial details.

PhishDestroy identifies this domain as a high-risk credential theft vector due to its active infrastructure and low detection at launch. VirusTotal shows zero detections out of 95 engines, the SSL certificate is issued by Google Trust Services, the domain is registered through Cloudflare, Inc., and the site resolves to IP 188.114.96.3. Creation date and inclusion on major blocklists are still under investigation, but the combination of unflagged status and Google-issued SSL raises red flags for immediate action.

Users should refrain from entering any credentials or sensitive information on wins-bam.pages.dev. If you have already done so, change passwords immediately on other accounts and enable two-factor authentication. Report the domain to your security team and consider configuring network-level blocks for 188.114.96.3 to prevent further access. Cloudflare’s registrar role means takedown may take additional time, so proactive blocking is strongly advised.