my[.]satandacu[.]online

The domain my.satandacu.online was observed hosting a credential phishing page targeting Satanda Credit Union, as indicated by the page title “Login | Satanda Credit Union”. The site was registered on February 21, 2026 and is currently taken offline, with the offline status confirmed by the reporting system. DNS resolution points to the IPv4 address 198.12.80.250, which belongs to the HostPapa hosting provider (ASN 36352) located in the United States. The TLS certificate attached to the site is identified as “R11”, confirming that HTTPS was in use at the time of capture.

Two of ninety‑five VirusTotal scanners flagged the domain as malicious, and the site appears on one external blocklist. Gridinsoft assigned a trust score of 0 out of 100, and PhishDestroy has listed the domain as blocked. The classification in the intelligence set is “Credential Phishing”, consistent with the observed page title. No additional attributes such as Safe Browsing verdicts, OTX tags, or detailed malware kit information are presently available, and the content of the page beyond the title has not been harvested.

Defenders should block or sinkhole the domain at the DNS level, add the IP address 198.12.80.250 to network‑level deny lists, and monitor for any future resolution changes. Endpoint security solutions should be updated to include the two VirusTotal detections as an indicator of compromise. Email gateways should be tuned to detect messages referencing Satanda Credit Union or the “Login” wording to reduce user exposure. Continuous re‑assessment is advised should the domain become active again.