santanderbank[.]com[.]cobblestonesw[.]com

The domain santanderbank.com.cobblestonesw.com is actively engaged in banking phishing, specifically targeting users of Santander Bank. The current status of this domain is active, posing a high risk to unsuspecting individuals who may be deceived by its legitimate appearance.

Analysis indicates that this domain is flagged by 23 of 95 VirusTotal vendors, suggesting a significant level of suspicion and potential malicious activity. The domain is registered through Cloudflare, Inc., and resolves to the IP address 104.26.15.207, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The domain was created on November 07, 2023, and currently appears on 1 security blocklist. The SSL certificate is issued by Google Trust Services / WE1, which may lend additional credibility to the impersonation.

Given the current active status of the domain and the high risk it poses, it is recommended that network administrators and security teams block this domain to prevent unauthorized access and potential financial loss. Users should be educated to verify the URL and SSL certificate of banking websites and to report any suspicious activity immediately. Continuous monitoring and updating of security measures are essential to mitigate the threat posed by this and similar phishing domains.