sterlingtrustfinancialcreditunion[.]com

This domain, sterlingtrustfinancialcreditunion.com, is flagged as an active credential phishing site targeting financial institution credentials. Registered on June 6, 2026, through Dynadot Inc, it resolves to IP 162.245.237.212 (ASN associated with CENTRIOHOST-LLC, US). The domain is currently active, returning an HTTP 200 status and using a Let's Encrypt SSL certificate (YR1). It appears on one security blocklist and is detected in two AlienVault OTX threat intelligence pulses. Analysis of available data indicates 17 of 91 security vendors on VirusTotal flag the domain, though the specific detection logic is not detailed in the available intelligence. The page title, 'Home - Sterling trust financial credit Union,' suggests an attempt to mimic a legitimate credit union, though no confirmed brand impersonation has been verified beyond this title. Technologies detected on the domain include Tailwind CSS, LiteSpeed, Alpine.js, jsDelivr, JivoChat, and HTTP/3, which are consistent with modern web development practices but do not provide definitive attribution to a specific phishing kit. Defenders should treat this domain as high-risk for credential harvesting. Immediate actions include blocking the domain and IP at perimeter security controls, monitoring for internal connections to 162.245.237.212, and reviewing logs for any user interactions with the domain since its registration. The domain's recent creation and active status warrant continued vigilance, as phishing campaigns often evolve or shift infrastructure. No evidence currently suggests lateral movement or secondary payload delivery from this domain, but further analysis of connected infrastructure is recommended if internal access is detected.