logintiger[.]com

This domain, logintiger.com, is identified as a credential-phishing infrastructure designed to impersonate a cryptocurrency or financial trading platform. Analysis of the page title, "Трейдинг с умом, а не с трудом" (translated: "Trading with brains, not effort"), suggests the domain targets Russian-speaking users under the guise of a legitimate trading service. No explicit association with a known brand or drainer kit was confirmed, but the domain exhibits characteristics consistent with credential-harvesting campaigns, including fake login portals and financial-themed social engineering tactics. Infrastructure analysis reveals the following technical indicators: the domain is flagged by 4 out of 95 security vendors on VirusTotal, indicating a moderate detection rate. It was registered through REG.RU LLC on May 13, 2026, an anomalous future date that may indicate domain spoofing or registry manipulation. The domain resolves to IP address 104.21.89.113, a Cloudflare-hosted endpoint commonly exploited to obfuscate malicious origins. It appears on three security blocklists and is referenced in one AlienVault OTX threat intelligence pulse. Gridinsoft assigns a trust score of 0/100, further corroborating its malicious classification. As of the latest assessment, logintiger.com has been taken offline, likely due to hosting provider or registrar enforcement actions. However, residual risk persists due to potential re-registration or migration to alternative infrastructure. Organizations are advised to block the domain and its associated IP at the perimeter, monitor for credential reuse attempts, and alert users who may have interacted with the site. Historical WHOIS and DNS records should be preserved for forensic analysis, and security teams should review logs for connections to 104.21.89.113 or related subdomains. Given the elevated risk level, immediate revocation of exposed credentials is recommended for affected users.