en-official-suiteas[.]pages[.]dev

PhishDestroy identifies en-official-suiteas.pages.dev as a live Microsoft 365 credential harvesting phishing site hosted on Cloudflare. This domain is part of an active campaign that lures users into entering their Microsoft account credentials on a fraudulent login page. The threat actor leverages Cloudflare Pages for rapid deployment and Google Trust Services SSL certificates to appear legitimate, increasing the likelihood of successful deception. This domain was flagged with a 4/95 detection rate on VirusTotal at the time of analysis, indicating no antivirus or security vendor has yet flagged it despite its active status. It is registered through Cloudflare, Inc., resolving to IP address 188.114.97.3, and is currently under investigation for phishing activity. The absence of detections highlights the challenge of real-time threat identification, as attackers continuously adapt infrastructure to evade detection. Users who visited en-official-suiteas.pages.dev should immediately check their Microsoft account for unauthorized access and enable multi-factor authentication if not already active. If any credentials were entered, change the password immediately and review account activity for suspicious logins. Avoid interacting with this site, and report it to Microsoft’s phishing reporting tool. Use up-to-date security software and browser protections to mitigate future risks.