# legionliberty.com — MALICIOUS

> Stay safe online—avoid legionliberty.com. This phishing domain is active and flagged for social engineering. Do not click suspicious links.

## Summary
PhishDestroy identifies legionliberty.com as a high-risk phishing domain targeting unsuspecting users with social engineering tactics. Classified under generic phishing, this domain poses a significant threat by attempting to deceive individuals into divulging sensitive information.

Analysis reveals that legionliberty.com was registered recently on March 2, 2026, via NAMECHEAP INC and resolves to IP address 45.147.197.190. It is currently active and listed on multiple security blocklists, including flags from Google Safe Browsing for social engineering. Furthermore, 15 out of 95 security vendors on VirusTotal have flagged this domain, underscoring its malicious intent and reinforcing the credibility of its phishing classification.

To protect against potential compromise, users and organizations should block access to legionliberty.com and monitor for any suspicious activity related to this domain. Remain cautious when encountering unsolicited links or emails referencing this site. PhishDestroy continues to track its status, urging vigilance as the domain remains active and a persistent threat.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Page title: Welcome!

## Domain Intelligence
- Registered: 2026-03-02 15:00:01
- Registrar: NAMECHEAP INC
- Country: IS
- IP: 45.147.197.190
- Nameservers: ns1.zomro.net ns2.zomro.ru ns3.zomro.com ns4.zomro.su

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Lionic", "Seclookup", "SOCRadar", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Live Page Content

### Page Text
Welcome! The domain is hosted by a hosting company: Company name: SIA Podaon Address: Ernesta Birznieka-Upisa street 18, LV-1050, Riga, Latvia Mail for abuse: abuse@zomro.com

## Evidence
- Screenshot: https://urlscan.io/screenshots/019caea8-1955-77c0-8433-c7044a5e3f7c.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/c6445c7d-e32e-4209-bbad-24786f290644
- PhishDestroy: https://phishdestroy.io/domain/legionliberty.com/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/legionliberty.com/
Last updated: 2026-03-14