deptms[.]pages[.]dev

This domain, deptms.pages.dev, is flagged as a credential phishing site impersonating Dept.MS, a commercial photography and videography service based in Accra, Ghana. The domain remains active and is designed to deceive visitors into submitting sensitive information under the guise of a legitimate business platform. Analysis indicates the threat type is highly targeted, leveraging the reputation of a known service provider to increase credibility. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on April 06, 2026, and resolves to the IP address 172.66.47.67, hosted within Cloudflare’s network in Canada. The SSL certificate is issued by Let’s Encrypt (serial number E7), a common choice for both legitimate and malicious sites. As of the latest scan, the domain has not been flagged by any of the 95 vendors on VirusTotal, though it appears on one security blocklist. The page title, 'Dept.MS - Commercial Photography & Videography | Accra, Ghana,' directly mimics the branding of the legitimate service, reinforcing the phishing narrative. Current status confirms the domain remains active and operational. Organizations and individuals are advised to block the domain and IP address at the network level. Security teams should monitor for any attempts to access deptms.pages.dev or related infrastructure, particularly from endpoints associated with photography, videography, or creative services. Given the lack of detections on VirusTotal, manual verification of this domain is recommended for environments where Dept.MS is a known vendor or partner.