legion[.]au

The domain legion.au has been identified as a generic phishing threat, currently taken offline. This domain was found to be impersonating qvmcd.com, as indicated by its page title. The domain was registered through Above.au Pty Limited and resolved to IP address 199.59.243.228. Its SSL certificate was issued by GoDaddy.com, Inc. / Go Daddy Secure Certificate Authority - G2, which may have lent it an air of legitimacy. PhishDestroy classifies this domain as generic phishing with an elevated risk level, meaning it could be used to steal sensitive information or distribute malware.

Technical analysis reveals that legion.au appears on 3 security blocklists and is flagged by 4 out of 95 VirusTotal vendors. This low detection rate suggests that the domain may have evaded many security filters, making it particularly dangerous. The domain's registration through an Australian registrar and its use of a GoDaddy SSL certificate are indicators that attackers often use to appear legitimate. The specific threat type is generic phishing, which could involve fake login pages or credential harvesting targeting users of qvmcd.com or other services.

Although the domain has been taken offline, users should remain vigilant. PhishDestroy recommends verifying any URLs or emails referencing legion.au or qvmcd.com before interacting with them. Avoid clicking on links from unknown sources, and always check the URL carefully for misspellings or unusual domain names. If you have entered any credentials or sensitive information on this domain, change your passwords immediately and monitor your accounts for suspicious activity.