streameprex-sysai[.]com

This domain, streameprex-sysai.com, registered on March 22, 2026, through Hosting Concepts B.V. d/b/a Registrar.eu, is flagged as a high-risk streaming scam. It resolves to IP address 188.114.97.3, hosted by CloudFlare, Inc. in Canada, and uses Cloudflare nameservers ara.ns.cloudflare.com and ricardo.ns.cloudflare.com. The domain has no SSL certificate, a Gridinsoft trust score of 0 out of 100, and is currently active with an HTTP 200 status. It appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, and is flagged by Google Safe Browsing for social engineering. VirusTotal data shows 14 out of 95 security vendors flagging it, indicating broad detection across the security community. Infrastructure analysis reveals that the domain employs HSTS, HTTP/3, and Cloudflare technologies, which are common for both legitimate and malicious sites but often used by phishers to hide true hosting origins. The use of Cloudflare, combined with the lack of SSL and low trust score, suggests an intent to deceive users under the guise of a streaming service. The absence of an SSL certificate is particularly concerning for a site claiming to offer media streaming, as legitimate services almost universally use HTTPS to protect user data. What is uncertain about this domain is the specific brand it imitates or the exact phishing kit deployed, as the available intelligence does not specify a targeted streaming platform. The domain's creation date of March 22, 2026, places it just under four months before this report, which is typical for disposable phishing infrastructure. Defenders should block this domain at the DNS and email gateway levels, as it is already flagged by multiple blocklists. End users should be warned that any credentials or payment information entered on this site will be compromised. Monitoring for similar domains registered through the same registrar or using identical Cloudflare configurations is recommended, as this pattern indicates an active threat actor group. Immediate action includes reporting to hosting provider Hosting Concepts B.V. for takedown, though the Cloudflare proxy may complicate IP-level blocking.