cloudspire-works[.]com

PhishDestroy identifies cloudspire-works.com as a live phishing page impersonating CloudSpire, a legitimate business software platform. The domain hosts a fraudulent login portal designed to harvest corporate credentials under the guise of a cloud-based service. Security analysts note the page title ‘Cloudspire’ closely mirrors the legitimate brand, creating high-risk confusion for unwary visitors. The threat is active and still resolving to hosting infrastructure at 172.67.148.102, indicating persistent operation despite low initial detection scores.

Evidence supporting this classification includes a VirusTotal scan score of 0 detections out of 95 engines, a domain creation date of February 25, 2026, and registration through GMO Internet, Inc. Although SSL-secured via a Let’s Encrypt certificate, this does not validate the domain’s legitimacy. The recent registration date and zero detections suggest a newly deployed threat likely evading current threat intelligence systems. Users should treat this domain as untrusted and avoid any interaction.

If you have visited cloudspire-works.com, immediately change any reused passwords and enable multi-factor authentication on all accounts. Scan your device for malware using reputable tools such as Malwarebytes or Windows Defender. Report the domain to your organization’s security team and consider blocking it at the network level. Monitor financial and email accounts closely for signs of unauthorized access. For continued protection, rely on proactive domain reputation checks and browser-based phishing warnings.