# usa-ledgor-starts.pages.dev — SUSPICIOUS

> PhishDestroy identifies usa-ledgor-starts.pages.dev as a tech support scam spoofing Microsoft. Zero detections on VirusTotal. Avoid clicking; report if visited.

## Summary
PhishDestroy has identified a new potential threat hosted at usa-ledgor-starts.pages.dev that mimics technical support services. This domain attempts to deceive users by posing as a legitimate Microsoft support page. Visitors may be prompted to download malicious software or surrender sensitive credentials under the guise of resolving a purported system issue. Scammers often use urgency and fear tactics to pressure users into compliance, making it critical to approach unsolicited technical support requests with skepticism.  This domain was flagged after analysis revealed it is a Cloudflare Pages-hosted site resolving to IP 172.66.46.211 with a Google Trust Services SSL certificate. VirusTotal currently returns 0 detections out of 95 security engines, indicating that mainstream antivirus tools have not yet flagged this site. While the domain registration details remain under investigation, its use of a legitimate hosting provider (Cloudflare) and SSL certificate adds a veneer of credibility that could mislead cautious users. The incorporation of 'usa-ledgor-starts' in the URL suggests a possible targeting strategy involving U.S. users or English-speaking regions.  If you or someone you know has visited usa-ledgor-starts.pages.dev, do not enter any personal or financial information. Disconnect from the session immediately and run a full system scan using updated antivirus software. Report the domain to your IT administrator or security team if you accessed it from a work device. For personal devices, consider changing passwords stored in browsers and enable two-factor authentication on critical accounts. Users can also file a report with Microsoft’s [Phishing Report page](https://www.microsoft.com/en-us/wdsi/support/report-unsafe-site) to help disrupt this scam infrastructure. Always verify technical support requests by contacting the official provider through verified channels before taking any action.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.46.211

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/0dd1a9ba-5421-405c-a0ec-d1f21e0a5c25
- PhishDestroy: https://phishdestroy.io/domain/usa-ledgor-starts.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/usa-ledgor-starts.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/usa-ledgor-starts.pages.dev/
Last updated: 2026-03-23