onpointcu[.]co[.]com

The phishing domain onpointcu.co.com targets OnPoint Credit Union customers. It has been flagged by 12 out of 91 VirusTotal vendors, indicating a significant level of detection and concern. Despite its current offline status, the domain was previously active, aiming to deceive users into divulging sensitive banking information.

Registered through Moniker Online Services LLC, the domain was hosted on IP address 104.21.79.27. It utilized an SSL certificate issued by Google Trust Services, which can lend an appearance of legitimacy to unsuspecting users. The domain's presence on four public blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, underscores its malicious intent.

Phishing domains like onpointcu.co.com exploit the trust users place in familiar brand names, in this case, OnPoint Credit Union. By mimicking legitimate websites, they can trick users into entering personal and financial data. The swift takedown of this domain helps mitigate the risk, but the initial detection and blocking are crucial in preventing data breaches. This case highlights the importance of continuous monitoring and quick response to emerging phishing threats.