now-io-usa-bridge[.]pages[.]dev

PhishDestroy identifies now-io-usa-bridge.pages.dev as an active phishing domain operating under a fake 'USA Bridge' support scam campaign. The threat level is currently under investigation but poses a credible risk due to its use of Google Trust Services SSL and legitimate Cloudflare hosting infrastructure, which increases the likelihood of successful deception. This domain leverages a *.pages.dev subdomain to mimic official support channels, targeting users seeking assistance with 'USA Bridge' services or products.

This domain was flagged with the following technical indicators: it resolves to IP 188.114.97.3, has zero detections on VirusTotal (7/95 engines), and is registered through Cloudflare, Inc., with an SSL certificate issued by Google Trust Services. While the domain is currently unblocked across known threat intelligence platforms, the absence of detections suggests it is either newly deployed or employing evasion tactics. The *.pages.dev subdomain structure is commonly used by threat actors to rapidly deploy phishing campaigns under the guise of official Google Pages hosting, further complicating detection for end-users.

To mitigate exposure to this threat, users should avoid interacting with unsolicited support requests related to 'USA Bridge' or any unexpected communications purporting to offer official assistance. Organizations should block the domain now-io-usa-bridge.pages.dev at the network perimeter and update internal blocklists to include IP 188.114.97.3. End-users should verify the authenticity of support channels through official, verified contact methods and report any suspicious activity to relevant fraud reporting agencies. Given the use of legitimate hosting and SSL infrastructure, heightened scrutiny and multi-factor authentication are recommended for accounts potentially linked to 'USA Bridge' services.