lern-leger-com-start[.]pages[.]dev

PhishDestroy identifies lern-leger-com-start.pages.dev as an active credential harvesting domain under investigation. This site mimics legitimate login portals to steal user credentials, posing a direct risk to individuals and organizations. Exercise caution when accessing or interacting with this domain.

This domain was flagged with a risk level of under_investigation and is currently active. It resolves to IP 172.66.44.61 and is registered through Cloudflare, Inc. VirusTotal scans show 8 out of 95 security vendors detecting malicious activity, indicating it has not yet been widely flagged. The domain uses a Google Trust Services SSL certificate, which may lend an air of legitimacy. No historical data on creation date or inclusion in blocklists is available at this time, but the lack of detections suggests it is a relatively new or stealthy threat.

To mitigate the risk of credential theft, avoid entering any personal or login information on this domain or its linked pages. If you suspect interaction with this site, immediately change passwords for affected accounts and enable multi-factor authentication where possible. Report the domain to your security team or through trusted phishing reporting channels. Monitor financial and account activity closely for signs of unauthorized access.