Yuri Neculiti (Iurie Neculiti; also Yuri Neculiti) — a Moldovan businessman, the younger brother of Ivan Nekuliti and former head of Stark Industries Solutions Ltd. His role in the web hosting business is recorded in the UK Companies Register and in EU sanctions decisions. [1][2][6]
What is known about his life story
CORRECTIV describes the brothers as natives of Moldova who developed an international business providing server services. Yuri was involved in the PQ Hosting project: according to a 2024 investigation, he owned a small stake in the company. The publication also mentioned his interest in motor racing. The size of his personal fortune is not specified in the dossier. [1]
The Companies House entry for the person with significant control over Stark states that he was born in February 1999. The same month and year are given in the most recent director’s entry. However, the appointment history includes entries for Iurie Neculiti with different months and years. Until the original registration documents have been verified, these discrepancies cannot be used to draw biographical conclusions. The full date of birth has not been established. [3][2]
Control over Stark Industries Solutions Ltd
In the UK register, Yuri is listed as holding a 75 per cent stake; the date of notification is 16 February 2024. Registered ownership should be distinguished from the actual division of responsibilities between the brothers and the management of individual network resources. [3]
In the CORRECTIV diagram, Ivan was responsible for the main commercial operations of PQ Hosting, whilst Stark was formally controlled by Yuri. Ivan himself explained the existence of the UK legal entity by the fact that clients and observers saw a neutral name in network data instead of ‘PQ Hosting’. This helps to explain why several names appear in publications about the servers, even though they refer to overlapping business structures. [1]
Stark Industries Solutions Ltd was incorporated on 10 February 2022 and was wound up on 16 September 2025. Therefore, describing Yuri as a serving director of an active UK company without specifying its status would be inaccurate. [4]
Infrastructure that caught the investigators’ attention
In a 2024 report, CORRECTIV traced a chain from the brothers’ companies to servers in a Dutch data centre and network interactions with MIRhosting. Investigators discovered resources linked to Russian information operations and cyberattacks on this infrastructure. In particular, the report examines RRN / Doppelganger and the activities of NoName057(16). [1]
Yuri appears in this story as a person involved in corporate oversight. His position alone does not reveal who selected clients, handled complaints, managed a specific server or had access to the data. The dossier makes no claim that he personally orchestrated the attacks.
Ivan Nekuliti responded to CORRECTIV’s questions regarding the unauthorised use of servers. He stated that attacks were prohibited and that complaints were being dealt with. These responses reflect the company’s public stance, but should not be taken as Yuri’s personal comments. [1]
EU sanctions and the 2026 update
On 20 May 2025, Yuri Nekuliti was added to the EU sanctions list alongside Ivan and Stark Industries. The Council of the EU linked the measures to the facilitation of Russian destabilising operations via hosting infrastructure. [5]
In a document dated 8 October 2026, the Council of the EU describes the transfer of Stark’s technical infrastructure to WorkTitans B.V. and its connection via MIRhosting. Yuri and Ivan are named as the beneficiaries of this arrangement. The original date of Yuri’s inclusion on the list — 20 May 2025 — remains unchanged. [6]
A 2025 technical report by Recorded Future specifically described changes to network registrations, the emergence of PQ Hosting Plus S.R.L. and the THE.Hosting brand. For the dossier, this is significant as a record of the evolution of the infrastructure, rather than merely a company rebranding. [7]
What can be said about the legal status
It has been documented that Yuri has been included on the EU sanctions list. Sanctions and criminal convictions are distinct legal matters. The sources examined provide no evidence of a conviction against Yuri or of his detention as part of the Dutch operation.
The FIOD did indeed report that two people had been arrested and more than 800 servers seized in May 2026, but did not name the brothers among those arrested. This status cannot be applied to Yuri. [8]
The context of the ‘Khimprom’ investigation
This profile relates to research into digital infrastructure providers. Publicly available information provides insight into Yuri’s role at Stark and into sanctions-related allegations concerning associated businesses. There is no confirmed personal connection between Yuri and Yegor Burkin, nor is there any contract for the provision of services to ‘Khimprom’, in verified sources.
The editorial review must specifically identify the particular service, the period of service and the party to the contract. The mere fact that criminals use commercial hosting does not make every owner or employee of the provider a member of their organisation.
