staketara[.]com

Analysis of staketara.com confirms its classification as a crypto scam domain targeting Ethereum users, with infrastructure and detection evidence supporting its malicious intent. The domain was registered on August 6, 2025, through HOSTINGER operations, UAB, a registrar frequently associated with phishing and fraudulent domains. It resolves to an IPv6 address (2a02:4780:84:7ef8:4b2a:7050:25e6:4e66) hosted on AS47583, operated by Hostinger International Limited in Japan, a network segment previously observed in similar campaigns. The page title, 'Bridge crypto to Starknet | StarkGate,' explicitly suggests a crypto-bridging service, aligning with the scam type labeled in threat intelligence feeds. Detection data further corroborates the domain's malicious nature.

As of the report date, staketara.com appears on two security blocklists and is flagged by PhishDestroy and ScamSniffer, two vendors specializing in phishing and crypto-related fraud. Gridinsoft assigns a trust score of 0/100, indicating high confidence in its classification as malicious. AlienVault OTX includes the domain in one threat intelligence pulse, suggesting its inclusion in active tracking by security researchers. VirusTotal reports a single detection from 93 security vendors, though the absence of broader detections does not diminish the validity of other indicators. The domain's SSL certificate, issued under the R10 root, provides no meaningful assurance of legitimacy, as such certificates are routinely issued to malicious domains.

At the time of analysis, staketara.com is offline, which may indicate takedown efforts or a temporary cessation of operations. Defenders should treat this domain as confirmed malicious, particularly in environments where Ethereum or Starknet-related services are accessed. Network-level blocking is recommended, alongside monitoring for related domains registered through the same registrar or hosted on similar infrastructure.