sterra-fundex[.]com

The domain sterra-fundex.com was registered on February 21, 2026 via NETIM SAS and is currently resolved to the IPv4 address 94.26.38.18, which belongs to AS202412 Omegatech LTD in Bulgaria. The web server presents a valid TLS certificate from Let’s Encrypt (E7) and returns HTTP 200 responses. Service fingerprinting identifies Nginx, OpenResty and IPinfo components, while the authoritative nameservers are ns1.netim.net, ns2.netim.net and ns3.netim.net. Email services are handled by mx1.netim.net and mx2.netim.net, both at priority 10. The page title reported by crawlers reads "Sterra Fundex | The Official Australia Website 2026," indicating a brand impersonation attempt. Google Safe Browsing flags the site for social engineering, and the domain appears on a single security blocklist, with PhishDestroy confirming its malicious status. Independent scanning on VirusTotal shows 13 of 93 security vendors flagging the domain, and the Gridinsoft trust score is 0 out of 100, reinforcing the high‑risk assessment. The infrastructure suggests a newly created, actively hosted site used for credential harvesting or fraud targeting entities associated with the "Sterra Fundex" brand. Evidence beyond the listed indicators—such as the specific content of the landing page, credential collection mechanisms, or malicious payloads—remains unconfirmed. Defenders should block the domain at perimeter filters, monitor outbound connections to its IP address, and update URL reputation feeds. Incident response teams encountering related phishing emails should advise users to avoid clicking links to this domain and to report any attempted credential submissions to their security operations center.