start-legr-com[.]pages[.]dev

PhishDestroy identifies start-legr-com.pages.dev as an active fake login scam hosted on Cloudflare Pages, designed to harvest user credentials under the guise of a legitimate service.

This domain resolves to IP 172.66.44.128 and operates under a Google Trust Services SSL certificate, which may lend false legitimacy to unsuspecting users. Currently, VirusTotal reports 15 out of 95 security engines detecting this threat, indicating it evades automated scanning tools. Registered through Cloudflare, Inc., the domain leverages Cloudflare’s infrastructure to obscure its true origin and complicate takedown efforts. While the exact creation date remains unverified, the domain’s association with Cloudflare Pages suggests recent deployment aimed at exploiting trust in reputable hosting providers.

Users who visited this domain should immediately check their accounts for unauthorized access, especially if credentials were entered. Do not reuse passwords across platforms, and consider enabling multi-factor authentication where possible. Report the domain to PhishDestroy for further analysis and to aid in blocking efforts. If financial or sensitive data was provided, contact your bank or relevant institution to mitigate potential fraud. Remain vigilant for follow-up phishing attempts or credential-stuffing attacks targeting exposed accounts.