EU sanctioned Stark Industries in May. Leaked docs gave them 12 days warning.
Result: ASN shuffle, rebrand to THE.Hosting. Corporate shells changed, network behavior didn't.
We tracked it: AS44477→AS209847. Packets don't lie.
🔗 https://www.greynoise.io/blog/stark-industries-shell-game
GreyNoise
npub1lm…um9t8
2025-11-17 20:56:56 UTC
Author Public Key
npub1lmdgglk68ys6e75ycxxrv2rufxs49hm5rxh23473f5rrgeucvm9qaum9t8Seen on
wss://relay.momostr.pinkPublished at
2025-11-17 20:56:56 UTCEvent JSON
{
"id": "1d7989e9b7d628dcf5e6daa0df4479fde8cf292e11246256fad77bdcc46e7f6a",
"pubkey": "feda847eda3921acfa84c18c36287c49a152df7419aea8d7d14d0634679866ca",
"created_at": 1763413016,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@greynoise/115567035436048758",
"web"
],
[
"proxy",
"https://infosec.exchange/users/greynoise/statuses/115567035436048758",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/greynoise/statuses/115567035436048758",
"pink.momostr"
],
[
"-"
]
],
"content": "EU sanctioned Stark Industries in May. Leaked docs gave them 12 days warning.\n\nResult: ASN shuffle, rebrand to THE.Hosting. Corporate shells changed, network behavior didn't.\n\nWe tracked it: AS44477→AS209847. Packets don't lie. \n🔗 https://www.greynoise.io/blog/stark-industries-shell-game",
"sig": "1e31df05c9ecf30f2cce5c5c2d1b789c739a7b6542bf28c634a38e0cecf0872e5f28b7e44f325f6b0fb902fd0fc4105fa820977af23677559af10fdc96223602"
}