suntrust-onlinebanking[.]blogspot[.]com

This domain, suntrust-onlinebanking.blogspot.com, is actively engaged in brand impersonation, specifically targeting the SunTrust brand to deceive users into providing sensitive information. The domain leverages the trust associated with the SunTrust name to create a convincing but fraudulent online banking portal, which can lead to financial and personal data theft.

Analysis indicates that this domain has been flagged by 15 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion and potential threat. The domain is registered through Google Blogger and resolves to the IP address 142.250.31.132, located in Germany and operated by AS15169 Google LLC. Despite these technical indicators, the domain remains active and is currently only blocked by one security blocklist, PhishDestroy, which underscores the need for heightened vigilance.

If users have visited this domain, they should take immediate action to secure their accounts. This includes changing passwords for SunTrust and any other accounts that use the same or similar credentials, monitoring financial statements for unauthorized activity, and reporting any suspicious incidents to their bank. Users are also advised to avoid clicking on links from unknown sources and to verify the URL and SSL certificate of any banking site they visit.