standard-bank-limited-group[.]onrender[.]com

Analysis of standard-bank-limited-group.onrender.com indicates an active banking phishing infrastructure as of July 30, 2026. The domain resolves to the IPv4 address 216.24.57.7 and is hosted by Render Services Inc., a provider commonly used for rapid deployment of web services. VirusTotal records show that 11 of 91 security vendors have flagged the domain, suggesting a moderate level of detection across commercial scanners.

PhishDestroy has already added the domain to its blocklist, and it appears on one additional security blocklist, reinforcing its malicious reputation. The domain’s authoritative name server information is unavailable (NS_NOT_FOUND), which hampers typical DNS‑based attribution but may be a deliberate tactic to evade passive discovery. Registration details point to a recent creation under Render Services Inc., a pattern observed in other phishing campaigns that leverage cloud platforms for short‑lived hosting.

No public SSL certificate details, HTTP status codes, or page titles have been disclosed, leaving the surface‑web characteristics unverified. Defenders should immediately block traffic to 216.24.57.7 and to the fully qualified domain name, incorporate the domain into threat‑intel feeds, and monitor for any derivative subdomains or similar Render‑hosted assets targeting financial credentials. Continuous re‑scanning with multi‑engine services is recommended to capture any future changes in detection status.