stargate[.]finance-app-web3[.]com

Analysis of stargate.finance-app-web3.com indicates that the domain was registered on February 21, 2026 through Hello Internet Corp. The site is hosted behind Cloudflare infrastructure (AS13335) and resolves to the IP address 104.21.80.1, which is geolocated to the United States. DNS resolution uses Cloudflare name servers lex.ns.cloudflare.com and sloan.ns.cloudflare.com, and the service presents an SSL certificate issued by Google Trust Services under the WE1 designation, confirming that HTTPS connections are terminated at the edge of Cloudflare. The observed page title is "Page Not Found," suggesting that the host currently returns a 404 response, and the domain status is reported as taken offline.

Security telemetry shows that the domain appears on two blocklists and has been actively blocked by PhishDestroy and ScamSniffer. VirusTotal scans report that eight of ninety-three security vendors flagged the domain, reinforcing the suspicion of malicious use. Detected technologies include Cloudflare and HTTP/3, consistent with the observed hosting configuration.

The classification in the intelligence set is a crypto scam, although no further details about the payload or victim interaction are available. Defenders should continue to block the domain at perimeter filters, monitor DNS queries for the associated Cloudflare name servers, and consider adding the domain to internal blacklists. Ongoing observation of the IP address 104.21.80.1 for any new activity is recommended, as the underlying Cloudflare edge could be reused for other malicious campaigns.