# asseveration.pages.dev — SUSPICIOUS

> PhishDestroy identifies asseveration.pages.dev (Cloudflare Pages) as a live Microsoft 365 credential phishing site flagged by 1 of 95 VirusTotal scanners.

## Summary
PhishDestroy identifies the domain asseveration.pages.dev as an active Microsoft 365 credential phishing host. The site is currently live and engaged in fraudulent campaigns targeting Microsoft 365 login credentials by impersonating the legitimate Microsoft 365 branding and authentication portal. Security teams and end-users should treat this domain as an imminent threat to Microsoft 365 account safety and corporate email environments.

This domain was flagged by 1 out of 95 VirusTotal security vendors, indicating limited but confirmed malicious detection. It is registered through Cloudflare, Inc., resolves to IP address 172.66.45.32, and operates under a Google Trust Services SSL certificate. The Cloudflare Pages platform is leveraged to host dynamic phishing content, making takedown more complex due to the platform’s legitimate infrastructure being abused. Historical blocklist records show consistent low-to-medium detection rates, reflecting its avoidance of major threat intelligence feeds until recent detections. The SSL certificate issued by Google Trust Services provides a false sense of security, as phishing pages often use valid TLS certificates to bypass browser warnings and appear legitimate to end-users.

Given the elevated risk classification and confirmed Microsoft 365 impersonation, PhishDestroy recommends immediate blocking of the domain asseveration.pages.dev and the associated IP 172.66.45.32 at the network perimeter. Organizations should deploy email filtering rules to detect and quarantine messages referencing this domain or similar Cloudflare Pages hosts. Users who may have submitted credentials should perform a password reset, enable multi-factor authentication, and scan devices for malware. Security teams are advised to monitor internal Microsoft 365 login logs for anomalous access patterns and issue user advisories to prevent further compromise. The use of Cloudflare Pages infrastructure highlights the need for enhanced scrutiny of dynamic content hosting services as vectors for phishing campaigns.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.45.32

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/8630f8d6-22d1-48f8-a633-cdba905f6dce
- PhishDestroy: https://phishdestroy.io/domain/asseveration.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/asseveration.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/asseveration.pages.dev/
Last updated: 2026-03-22