streamyard[.]digital

Analysis of streamyard.digital indicates a newly registered domain that is being used for brand impersonation of StreamYard. The domain was created on February 21, 2026 and is registered through PDR Ltd. d/b/a PublicDomainRegistry.com. DNS resolution points to the IP address 172.67.198.1, which belongs to Cloudflare, Inc. (AS13335) and is located in the United States. The authoritative nameservers are arnold.ns.cloudflare.com and audrey.ns.cloudflare.com, confirming that the domain is hosted behind Cloudflare's reverse‑proxy service. No SSL certificate was observed, implying that HTTPS is not configured for the site.

The HTTP response is currently offline, and the domain has been taken down, but historical evidence shows that the page title returned "StreamYard," matching the target brand name. Threat intelligence sources have flagged the domain: AlienVault OTX recorded a single pulse referencing it, and VirusTotal reported that five of ninety‑three security vendors flagged the domain as malicious. Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on three external blocklists. It has also been blocked by PhishDestroy, MetaMask, and SEAL. The combination of a brand‑matching page title, low trust score, multiple vendor detections, and inclusion on blocklists strongly suggests a brand‑impersonation campaign.

Uncertainty remains regarding the exact payload or credential‑harvesting mechanism because the site is offline and no content was captured. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the domain or related subdomains, and update endpoint protection signatures to include the observed indicators. Ongoing surveillance of Cloudflare‑hosted IP ranges associated with this domain is advisable, as threat actors often recycle infrastructure.