us-support-ledgor-en[.]pages[.]dev

PhishDestroy identifies us-support-ledgor-en.pages.dev as a live Microsoft Support scam page hosted on Cloudflare Pages. The domain presents a convincing spoof of Microsoft’s official support portal, urging visitors to call a fraudulent helpline under the guise of resolving system errors or account issues. Threat actors are distributing this page via phishing emails and sponsored ads to harvest credit-card details and remote-access credentials. Analysis shows the page exploits Google Trust Services certificates and Cloudflare IP 188.114.96.3 to appear legitimate while avoiding immediate browser warnings.

This domain was flagged by OpenPhish and PhishingDB with 2 active blocklist entries and currently registers 0 detections out of 95 on VirusTotal, indicating a zero-day threat still under the radar. The registrar is Cloudflare, Inc., which was used to create the domain within the last 30 days. Despite the low detection rate, the presence on multiple blocklists and the use of a Google-issued SSL certificate suggests ongoing exploitation.

Users who visited this page should immediately close the browser tab and run a full antivirus scan. Never input payment data or allow remote access to a technician claiming to be from Microsoft. If you provided information, monitor bank statements for fraudulent charges and consider revoking saved payment methods. Report the domain to your email provider and browser vendor to help block future access.