# pyramidsadmin.legionagency.cloud — SUSPICIOUS

> Watch out for pyramidsadmin.legionagency.cloud, a phishing site mimicking Pyramids Airlines. Learn how to stay safe from scams.

## Summary
PhishDestroy has identified pyramidsadmin.legionagency.cloud as a low-risk phishing domain impersonating Pyramids Airlines. Although currently offline, this site posed a threat by attempting to deceive visitors into revealing personal or financial information.

This phishing attempt involved a fake webpage titled "PYRAMIDS AIRLINES" designed to trick users into believing they were interacting with the legitimate airline. The domain was registered recently and appeared on two security blocklists, indicating suspicious activity. Despite only one security vendor flagging it on VirusTotal, users should remain cautious as phishing tactics can be subtle.

If you visited pyramidsadmin.legionagency.cloud, it is important to monitor your accounts for unusual activity and avoid providing any sensitive data. Running an antivirus scan and changing your passwords is recommended. Staying vigilant and verifying URLs before entering credentials helps protect against such deceptive domains.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: PYRAMIDS AIRLINES

## Domain Intelligence
- Registered: 2026-03-05 01:07:02
- Registrar: HOSTINGER operations, UAB
- Country: LT
- IP: 76.13.52.129
- IP Country: FR
- IP City: Paris
- IP Org: AS47583 Hostinger International Limited
- Nameservers: ns1.dns-parking.com ns2.dns-parking.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["ChainPatrol"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://i.ibb.co/1fsDrV0N/8c6ca90119b9.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/pyramidsadmin.legionagency.cloud
- PhishDestroy: https://phishdestroy.io/domain/pyramidsadmin.legionagency.cloud/
- LLM endpoint: https://phishdestroy.io/domain/pyramidsadmin.legionagency.cloud/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/pyramidsadmin.legionagency.cloud/
Last updated: 2026-03-19