store-publisher[.]live

This domain, store-publisher.live, is flagged as a credential theft operation designed to harvest user login credentials through deceptive interfaces. Analysis of the page title, "Matrix Unit Converter," suggests an attempt to mimic legitimate utility tools, potentially luring victims into entering sensitive information under false pretenses. No direct association with known brand impersonation or crypto drainer kits has been confirmed, but the domain exhibits characteristics consistent with credential harvesting schemes. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 188.114.96.3 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 27, 2026. It is currently flagged by 7 out of 95 security vendors on VirusTotal, with detections from two independent security blocklists. The domain employs a Let's Encrypt SSL certificate, which, while providing encryption, does not validate legitimacy. No entries were found in Google Safe Browsing at the time of analysis, though it has been reported in one AlienVault OTX threat intelligence pulse. The domain is currently offline, reducing immediate risk to end users. However, historical activity and infrastructure persistence warrant continued monitoring. Response actions by security entities, including PhishDestroy and OISD, have successfully blocked access, mitigating further exposure. Remaining risk includes potential reactivation or migration of the threat to alternative domains. Users are advised to verify domain authenticity before entering credentials and to report any suspicious activity to their security teams for further investigation.