loginpublic[.]com

Analysis of loginpublic.com indicates that the domain was registered through NameSilo, LLC on July 02, 2026. The site resolves to IP 18.245.60.89, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. HTTP requests return status 200 and the TLS certificate is issued by Let's Encrypt (identifier YE2). The domain is listed on three security blocklists and appears in four AlienVault OTX pulses. VirusTotal records show eight of ninety‑one scanning engines flagging the domain as malicious. Additional blocklist sources such as PhishDestroy, MetaMask and SEAL also list the domain. Gridinsoft assigns a trust score of 0 out of 100. The page title returned is “Sign in”, matching the designated scam type of credential phishing. Nameservers are sandy.ns.cloudflare.com and tim.ns.cloudflare.com. No further technical artifacts such as malware payloads or command‑and‑control infrastructure have been observed. The available evidence is sufficient to classify the domain as an active credential‑phishing site targeting login credentials. Defenders should block the domain at perimeter filters, add the associated IP address to deny lists, and monitor for outbound connections to the Amazon AS16509 network that may be initiated by compromised clients. Continuous re‑evaluation is advised in case additional indicators emerge.