lezger-loginns[.]pages[.]dev

PhishDestroy has identified lezger-loginns.pages.dev as an active credential phishing domain designed to steal user login details. This fraudulent site mimics legitimate login portals to trick victims into submitting sensitive information such as usernames, passwords, or other credentials. Once harvested, these stolen details are likely to be used for unauthorized account access, identity theft, or further phishing campaigns targeting the victim’s contacts or linked services. Users who interact with this domain risk compromising their online accounts and personal data.

This domain was flagged by PhishDestroy after analysis revealed it is hosted on Cloudflare Pages and resolves to IP address 172.66.45.20. As of the latest scan, it remains undetected by 95 VirusTotal security engines, indicating low detection coverage despite its malicious intent. The domain is secured with an SSL certificate issued by Google Trust Services, which may enhance its perceived legitimacy to potential victims. While the exact registration date is not specified in available intelligence, the use of Cloudflare Pages suggests a recent deployment aimed at evading detection.

If you visited lezger-loginns.pages.dev and entered any credentials, immediately change the passwords for those accounts and enable two-factor authentication where available. Scan your device for malware using a reputable security tool and monitor your accounts for unusual activity. Avoid clicking on any links or downloading files from this domain. Report the incident to your organization’s security team or to PhishDestroy if you suspect further compromise. Stay vigilant and verify the authenticity of login pages by checking the domain URL and looking for HTTPS indicators before entering sensitive information.