secur-leg-ing[.]wpdevcloud[.]com

This domain, secur-leg-ing.wpdevcloud.com, was used in a credential phishing operation targeting Spanish-speaking users. The site displayed a page titled 'Opina sobre Cuenta,' which likely presented a fraudulent survey or login form designed to harvest account credentials, payment details, or personal information. Such pages often mimic legitimate services to deceive visitors into entering sensitive data, which is then transmitted to attackers for unauthorized access or financial fraud. Analysis indicates the domain was flagged by 17 out of 95 security vendors on VirusTotal, confirming its malicious nature. It was registered through eNom, LLC, and resolved to the IPv6 address 2607:1b00:93b2:e42c::28c4. The SSL certificate was issued by PerfectSSL, which, while providing encryption, does not validate the legitimacy of the site. Google Safe Browsing classified the domain under 'SOCIAL_ENGINEERING,' and it appeared on at least one security blocklist prior to being taken offline. The Gridinsoft trust score of 0/100 further corroborates its high-risk status. If you visited secur-leg-ing.wpdevcloud.com or entered any information on the site, immediate action is required. Disconnect the affected device from the network to prevent potential data exfiltration. Change passwords for any accounts accessed from the device, prioritizing email, banking, and other sensitive services. Enable multi-factor authentication where available. Scan the device using updated security software to detect and remove any malware. Monitor accounts for unauthorized activity and report any suspicious transactions to the relevant financial institutions. If credentials were submitted, assume they are compromised and avoid reusing them across other platforms.