logininfor[.]shop

logininfor.shop is a malicious domain designed to trick users into handing over their Facebook login credentials. It posed as a legitimate Facebook login page, complete with the familiar title 'Facebook – log in or sign up,' but in reality it was a phishing trap set up by cybercriminals. The site is now offline, but while it was active, anyone who visited and entered their email and password would have unwittingly given their account access to attackers.

PhishDestroy identified this threat through multiple reliable sources. VirusTotal flagged the domain with 21 out of 95 security vendors marking it as malicious, a strong indicator of its dangerous nature. The domain was registered on February 1, 2026, through Name.com, Inc., and was found in one threat intelligence pulse on AlienVault OTX. It resolved to IP address 100.27.215.130 and had no SSL certificate, further confirming its lack of legitimacy. The site also appeared on one security blocklist, reinforcing the findings.

If you visited logininfor.shop and entered your Facebook credentials, take immediate action. Change your Facebook password right away and enable two-factor authentication if you haven't already. Also check your account for any suspicious activity, such as unrecognized logins or messages sent from your profile. It's a good idea to run a security scan on your device as well, just to be safe. Remember, always verify the URL before logging into any site, and never enter credentials on pages that lack HTTPS or have suspicious domain names.