starex-supp[.]info

The domain starex-supp.info was created on June 12, 2026 and is registered through PDR Ltd. d/b/a PublicDomainRegistry.com. Its authoritative name servers are angela.ns.cloudflare.com and rayden.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. The domain resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc., a US‑based hosting provider. An SSL certificate issued by Google Trust Services under the WE1 label is present, confirming that HTTPS connections are possible, but the certificate alone does not validate the site’s legitimacy.

The site was identified by PhishDestroy as a malicious entity and was subsequently taken offline. It appears on a single security blocklist and has been flagged by four of ninety‑one vendors on VirusTotal, suggesting that a minority of scanning engines detected phishing‑related artifacts. Gridinsoft assigned a trust score of zero out of one hundred, reflecting a highly suspicious reputation. No public page title or content analysis is available because the site is currently offline, leaving the exact phishing payload or targeted brand undefined.

Defenders should immediately block starex-supp.info at the DNS or proxy level, add the associated IP 188.114.97.3 to network deny lists, and monitor Cloudflare‑associated traffic for re‑hosting attempts. Continuous observation of threat intelligence feeds for any re‑registration or resurrection of the domain is advised, as the underlying infrastructure (Cloudflare) can be reused for future campaigns. The combination of recent registration, low trust score, partial vendor detections, and the presence of a legitimate SSL certificate underscores the need for proactive blocking and vigilant monitoring.