signindat[.]com

This domain is flagged as a credential‑phishing infrastructure. signindat.com was registered on 30 January 2026 via Internet Domain Service BS Corp. and is hosted on the IPv4 address 193.26.115.45. The authoritative name servers are ns1.rdp.sh and ns2.rdp.rs, both of which are commonly observed in malicious hosting setups. The domain appears in five AlienVault OTX pulses and is listed on a public security blocklist, indicating that multiple threat‑intel sources have correlated it with phishing campaigns. Google Safe Browsing classifies the site as delivering unwanted software, and VirusTotal reports 18 of 95 scanning engines flag the domain as malicious, reinforcing the suspicion of credential‑theft activity. PhishDestroy has already added the domain to its blocklist, confirming active mitigation by at least one anti‑phishing service. Evidence confirms that the domain is actively resolving and is not retired. However, no direct analysis of the landing page content is available, so the exact phishing vector (e.g., credential‑capture form, malicious download) remains unknown. Defenders should treat signindat.com as hostile: block DNS resolution and any HTTP/S traffic to the domain, monitor for connections to 193.26.115.45, and incorporate the associated nameservers into threat‑intel feeds. Continuous re‑scanning of the domain on multi‑engine services is advised to detect any evolution in payload or detection rate.