wastersupply[.]pages[.]dev

This domain, wastersupply.pages.dev, is identified as a credential harvesting phishing site targeting users through deceptive login interfaces. Analysis indicates the infrastructure was designed to mimic legitimate authentication portals, likely capturing entered credentials for unauthorized access to accounts or services. The domain’s content and structure align with known phishing tactics, including the use of cloned branding and urgent prompts to deceive victims into submitting sensitive information. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc., and resolves to the IP address 188.114.97.3, associated with AS13335. The domain was created on September 02, 2020, but recent activity suggests reactivation for malicious purposes. Detection metrics confirm elevated risk: 11 out of 95 security vendors on VirusTotal flagged the domain, and it appears on one security blocklist. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the threat, as phishing domains frequently leverage valid certificates to appear legitimate. Users who visited wastersupply.pages.dev should immediately revoke any entered credentials, particularly for financial, email, or corporate accounts. Monitor linked accounts for unauthorized activity and enable multi-factor authentication where available. Network administrators are advised to block the domain and its resolving IP (188.114.97.3) at the perimeter to prevent further exposure. If credentials were submitted, assume compromise and initiate password resets across all platforms where identical or similar credentials were used.