cloud-lgrlive[.]wixstudio[.]com

This domain, cloud-lgrlive.wixstudio.com, has been confirmed as a credential theft operation designed to harvest login credentials from users under the guise of legitimate cloud services. Analysis indicates the site employs social engineering tactics to mimic trusted cloud platforms, likely prompting victims to enter sensitive authentication details into fraudulent forms. The infrastructure leverages a 404 error page as a potential evasion technique, though underlying malicious intent is evident through behavioral and reputational indicators. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on April 28, 2026, an anomalous future date suggesting potential domain spoofing or registry manipulation. The domain resolves to the IP address 34.144.206.118 and is hosted on Wix Studio infrastructure, utilizing technologies such as React, Google Cloud, and HSTS. Detection metrics confirm elevated risk: the domain appears on one security blocklist, and five out of ninety-five security vendors on VirusTotal have flagged it as malicious. The SSL certificate is issued by Let’s Encrypt, a common but not exclusive indicator of legitimate sites, further complicating automated detection. Users who visited cloud-lgrlive.wixstudio.com should immediately revoke any entered credentials, particularly those associated with cloud services or single-sign-on providers. Monitor accounts for unauthorized access or anomalous activity, and enable multi-factor authentication where available. If financial or personally identifiable information was submitted, consider reporting the incident to relevant fraud prevention authorities and credit monitoring services. Network administrators should block the domain and its resolving IP (34.144.206.118) at the perimeter to prevent further exposure.