login[.]affiliate-token[.]com

Analysis of login.affiliate-token.com indicates that the domain is currently active and associated with a credential‑phishing campaign. The site has been added to a single security blocklist and is blocked by the PhishDestroy feed, demonstrating that at least one reputable anti‑phishing service has identified it as malicious. VirusTotal records show the domain was scanned by 91 AV engines, none of which reported a detection at the time of analysis; this absence of detections should not be interpreted as an indication of benign behavior.

No public Safe Browsing, OTX, or similar reputation services have published entries for the domain, and no registrar, ASN, or geographic hosting information is disclosed in the available intelligence. SSL/TLS configuration details, HTTP response codes, and page‑title metadata have not been published, leaving the surface‑level characteristics of the site unverified. Defenders should treat the domain as a high‑confidence phishing indicator and enforce blocking at perimeter firewalls, DNS filtering, and endpoint protection solutions.

Monitoring of inbound traffic for attempts to resolve or contact login.affiliate-token.com is recommended, as well as the inclusion of the domain in URL‑filtering policies. Incident response teams should investigate any authentication attempts that involve credentials submitted to this host, and users should be warned to avoid entering login information on any site that resolves to the domain.