sterlitecyber[.]com

sterlitecyber.com was registered on 21 February 2026 through Hostinger International Limited (UAB) and uses the default parking nameservers ns1.dns-parking.com and ns2.dns-parking.com. The domain resolves to IP 147.93.42.201, which is owned by AS47583 Hostinger International Limited and is geolocated in the United States. No SSL certificate was presented during the scan, indicating the site was served over plain HTTP. The only visible content was a page titled “Sterlitecyber - Experience Advanced Tech & Cyber Recovery”, which aligns with the listed scam type of a crypto scam.

The domain has been added to a single security blocklist and was flagged by PhishDestroy. VirusTotal analysis recorded a single positive detection out of 93 scanned security vendors, confirming that at least one vendor identified malicious behavior. The infrastructure is currently reported as offline, and the domain is marked as taken offline in the intelligence feed. Defenders should continue to block both the domain and its resolved IP address at perimeter and DNS filtering layers.

Because the site lacks TLS, any attempted HTTP connections are trivially observable and can be logged for early warning. Monitoring for new sub‑domains or re‑activation of the same IP range is advisable, as the hosting provider is a common platform for rapid re‑deployment of fraudulent sites. The limited evidence base—absence of a certificate, a single blocklist entry, and only one vendor flag—means that the full malicious payload or phishing page content has not been captured; analysts should treat the domain as a high‑confidence indicator of a crypto‑related impersonation campaign targeting users who may be searching for “Sterlitecyber”. Ongoing threat‑intel feeds should be consulted for any resurgence or related indicators.