Redirect recorded fun-app.streampump.fun-app.stream 2026-01-31 Details

Domain security and threat intelligence

fun-app.stream

Name: fun-app.stream — PhishDestroy evidence record
Published: 2026-03-07
License: https://creativecommons.org/licenses/by/4.0/

In short

PhishDestroy first recorded fun-app.stream on 2026-03-07. Stored VirusTotal result: 5/91 engines flagged.

“fun-app.stream/”

Review the evidence

Registrar: Porkbun
Resolved IP: 188.114.96.3Cloudflare, Inc. · CDN
Registered: Jan 22, 2026
First observed: Mar 7, 2026

PhishDestroy assessment Critical

88/100

Evidence score

Availability Last known active Latest stored reachability observation Observed Nov 2, 2026 · 11:04 UTCHTTP probe

Risk signals

VirusTotal detections: 5/91 Spamhaus DBL: phishing domain

VirusTotal

5 / 91

engine detections

OTX

community references

URLScan

Malicious

engine verdict · score 96

Page captures

open gallery

Domain age

284 days

registered 2026-01-22 according to RDAP

Reports sent

view timeline

ABUSE NOTICE · 7D+ OPEN Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.

Notification and current-status evidence

The sent-report ledger records the first outgoing report at 2026-03-07 00:55:57 UTC. The recorded recipient is abuse@porkbun.com. The latest stored availability evidence still shows the domain reachable; 8 months has elapsed since the first outgoing report.

ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.

Elapsed since first report

8 months

Reports sent

Latest case ID

PD-20260307-6A93D5

Current status

HTTP 301 at latest stored check

Analysis

Domain summary

PhishDestroy first recorded fun-app.stream on 2026-03-07. Stored VirusTotal result: 5/91 engines flagged. Risk: critical (88/100). Registrar: Porkbun. Status: Last known active. Hosting: Cloudflare, Inc. PhishDestroy sent 1 abuse report. Do not enter credentials or connect a wallet.

Critical

Status: Last known active
VirusTotal: 5 / 91
Scam type (automated label): Credential Phishing
Hosting: 188.114.96.3Cloudflare, Inc. · CDN
Registrar: Porkbun
Registered: Jan 22, 2026
OTX: 24 community refs
Page captures: 8

Page captures Source results Registration record

Recorded source summary

PhishDestroy stores a record for fun-app.stream. Source observations are dated separately; missing checks do not establish safety.

A reviewed analysis is not available for this text revision. Consult the dated source records below.

Source evidenceVirusTotal 5 / 91 · OTX 24 references 11 sources

VirusTotal

5 / 91 engine detections

Retrieved / checked: 2026-09-29 04:16:21 · as stored; legacy timezone not established

Open report

Spamhaus DBL

phishing domain

2026-10-12 14:37 UTC

URLScan

Malicious · engine verdict · score 96

SHA-256 70a7d9174318851124e9803fd6f0c334cf5b0c29d75f7a10b1580c73951a5a86

2026-03-07 00:51 UTC

Open report

URLScanOriginal source recordObserved: 2026-03-07 00:51:01 UTC19 fields

Observed: 2026-03-07T00:51:01Z · Retrieved: 2026-11-01T19:45:21Z

Report ID

019cc5c6-5597-75cb-92e7-8fb8b77700c8

Final URL

https://fun-app.stream/

HTTP response

200

Redirect type

https-only

Redirects

To
https://fun-app.stream/
From
http://fun-app.stream/
Status
307
To
http://fun-app.stream/
From
https://fun-app.stream/
Status
307
To
https://fun-app.stream/
From
http://fun-app.stream/
Status
301

IP address

104.21.35.81

Contacted domains

static.cloudflareinsights.com

Contacted IP addresses

104.16.79.73
104.21.35.81

Autonomous systems (ASN)

13335

Document hash

0ca89b73d851f19f8fd259117342e6eed347f335cdc759dfd8a35f7b3f635d98

JavaScript globals

__cfBeacon

TLS session and certificate

Subject alternative names: fun-app.stream
*.fun-app.stream
Cipher: AES_128_GCM
Issuer: WE1
Subject: fun-app.stream
Protocol: QUIC
Valid until: 2026-04-22 22:39:33 UTC
Valid from: 2026-01-22 21:41:49 UTC

Domain age, days

Registered domain age, days

Certificate age, days

Certificate validity, days

Page requests

Provider verdicts

Engine verdict

Tags: urlscan-ml
urlscan-ml-60c5e22
Score: 96
Malicious: Yes

Overall verdict

Score: 0
Malicious: No

HTTP headers

Server: cloudflare
Content-type: text/html
Strict-transport-security: max-age=63072000; includeSubDomains; preload
Content-security-policy: frame-ancestors http: https:
X-content-type-options: nosniff
Priority: u=0,i

Original source fields · JSON

Uuid	019cc5c6-5597-75cb-92e7-8fb8b77700c8
Final url	https://fun-app.stream/
Status	200
Redirected	https-only
Redirects	[ { "to": "https://fun-app.stream/", "from": "http://fun-app.stream/", "status": 307 }, { "to": "http://fun-app.stream/", "from": "https://fun-app.stream/", "status": 307 }, { "to": "https://fun-app.stream/", "from": "http://fun-app.stream/", "status": 301 } ]
Ip	104.21.35.81
Contacted domains	[ "static.cloudflareinsights.com" ]
Contacted IP addresses	[ "104.16.79.73", "104.21.35.81" ]
Asns	[ "13335" ]
Document hash	0ca89b73d851f19f8fd259117342e6eed347f335cdc759dfd8a35f7b3f635d98
Globals	[ "__cfBeacon" ]
Tls	{ "san": [ "fun-app.stream", "*.fun-app.stream" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "fun-app.stream", "protocol": "QUIC", "valid_to": "2026-04-22T22:39:33Z", "valid_from": "2026-01-22T21:41:49Z" }
Domain age days	43
Apex age days	43
Tls age days	43
Tls valid days	90
Requests	4
Provider verdicts	{ "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 96, "malicious": true }, "overall": { "score": 0, "malicious": false } }
HTTP headers	{ "server": "cloudflare", "content-type": "text/html", "strict-transport-security": "max-age=63072000; includeSubDomains; preload", "content-security-policy": "frame-ancestors http: https:", "x-content-type-options": "nosniff", "priority": "u=0,i" }

Separate monitor record · 2026-11-02 04:30 UTC

Separate stored monitor snapshot; does not replace the primary report record or establish current availability.

record_source: domain_monitor.urlscan
uuid: 019cc5c6-5597-75cb-92e7-8fb8b77700c8
report_url: https://urlscan.io/result/019cc5c6-5597-75cb-92e7-8fb8b77700c8/
score: 0
malicious: false
result_at: 2026-11-02T04:30:36Z
enriched_at: 2026-03-24T11:50:20Z
source_timestamps: {"urlscan_result_at":"2026-11-02 05:30:36","urlscan_enriched_at":"2026-03-24 12:50:20"}
timestamp_basis: Europe/Berlin, as used by the existing report; source timestamps are retained verbatim

URLQuery

checked — no detections recorded

2026-03-07 00:55 UTC

Open report

PhishStats

checked — no match recorded

2026-03-07 03:52:17 · check time as stored; timezone unknown

OTX

24 community references

2026-10-29 12:58 UTC

Open report