app-stark[.]online

On July 24, 2026, analysis of the domain app-stark.online confirms a brand‑impersonation operation targeting the cryptocurrency platform celer. The site was registered on 22 December 2025 via HOSTINGER operations, UAB and resolves to the IPv4 address 92.113.16.248, which belongs to AS47583 (Hostinger International Limited) in Germany. DNS resolution is served by ns1.dns‑parking.com and ns2.dns‑parking.com, typical of parked or low‑cost hosting. No TLS certificate was observed, indicating that the site was delivered over plain HTTP. The only visible content indexed by security tools is the page title “Starknet (STRK) to Bounce Back?

RSI Divergence Hinting at a Potential Upward Move”, which appears unrelated to celer and suggests a content‑spoofing tactic aimed at attracting crypto‑interested users. Reputation checks show a Gridinsoft trust score of 0 / 100 and inclusion on a single security blocklist. The domain is listed as blocked by the PhishDestroy service, and 7 of 93 VirusTotal scanners flagged the host as malicious, reinforcing the suspicion of abuse. The site’s current HTTP status is offline, but the historical presence on blocklists indicates that it was previously reachable and active. Uncertainties remain regarding the exact payload delivered to visitors, as no SSL handshake, login page, or malware sample has been captured.

The limited number of detections suggests that the site may have been operational for a short window before takedown. Defenders should add app‑stark.online to network‑level deny lists, monitor outbound connections to 92.113.16.248, and flag any DNS queries to its parking nameservers. Because the registrar is Hostinger, future domains created under the same account should be scrutinised. Continuous re‑scanning of the IP address is advised to detect any resurgence of malicious content.