# PhishDestroy domain threat record: streambanana.cyou Content language: English Canonical HTML report: https://phishdestroy.io/domain/streambanana.cyou/ Machine-readable companion: https://phishdestroy.io/domain/streambanana.cyou/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-27 21:23:59 UTC - Last availability or vendor check: 2026-10-27 21:50:48 UTC - Stored record updated: 2026-10-27 23:45:11 UTC - VirusTotal detections in the stored snapshot: 6/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: disney+ ## Stored infrastructure - Observed IP address: 188.114.97.3 - Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED - Registrar country in stored WHOIS data: MA - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-10-23 18:16:13 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a17f56-a14c-751e-ab8b-0a872e195e64/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/streambanana.cyou - Certificate Transparency search: https://crt.sh/?q=%25.streambanana.cyou - Web Archive lookup: https://web.archive.org/web/*/https://streambanana.cyou/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added streambanana.cyou to its internal blocklist on 2026-10-27 after an admin report flagged the four‑day‑old domain. The recorded page title was “StreamBanana” and it claimed to offer unlimited movies and TV shows without registration or ads. An HTTP 200 response and TLS certificate were recorded on the same date, but the listing does not confirm any specific malicious activity. How the scam works The current evidence does not identify a concrete fraud mechanism; the domain is simply marked as suspicious based on its recent creation, promotional content, and security detections. Such domains are often used for phishing, ad fraud, or malware distribution, but no definitive behavior was observed on this page. Evidence VirusTotal scanned the domain on 2026-10-25 and reported six detections from 92 engines, including one malicious label (CRDF) and five suspicious or spam labels (Certego, Fortinet, SOCRadar, Gridinsoft, alphaMountain.ai). Google Safe Browsing checked the URL on 2026-10-27 and returned no warning. urlscan.io captured the site on 2026-10-25; its machine‑learning engine gave a high malicious score (97) but the overall verdict was non‑malicious. PhishDestroy’s internal blocklist marks the domain as true, while external blocklists showed zero matches except a Cloudflare Family block. Infrastructure The domain was registered with NICENIC INTERNATIONAL GROUP CO., LIMITED on 2026-10-23 and expires on 2027-10-23. DNS records at the time showed Cloudflare A and AAAA addresses (for example 104.21.41.190 and 172.67.166.208) and the TLS certificate indicated service via Cloudflare’s network in GB. A Let’s Encrypt certificate covering *.streambanana.cyou was issued on 2026-10-24 and is valid until 2027-01-22. What to do Visitors should avoid entering credentials or downloading files from the site and should change any passwords used on it. Organizations should block the domain at the firewall and monitor logs for connections to the recorded Cloudflare addresses. If any account information was submitted, reset passwords and review for unauthorized activity. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a17316-1485-72f7-b77f-83e337cac25b/ Cloudflare Radar report: https://radar.cloudflare.com/scan/ccc243fe-96de-4f62-8353-252eb6ead35a Stored capture screenshot: https://urlscan.io/screenshots/01a17316-1485-72f7-b77f-83e337cac25b.png Cloudflare Radar screenshot (2026-10-27T21:32:49Z): https://screenshots.phishdestroy.io/cf/ccc243fe-96de-4f62-8353-252eb6ead35a.png URLScan screenshot (2026-10-25T03:06:05Z): https://screenshots.phishdestroy.io/us/01a17105-9b9d-72dd-9734-49ee1efbaad5.png URLScan capture report: https://urlscan.io/result/01a17105-9b9d-72dd-9734-49ee1efbaad5/ VirusTotal report: https://www.virustotal.com/gui/domain/streambanana.cyou Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=streambanana.cyou Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-27 21:36:02 UTC ## Stored page captures - Primary capture: https://i.ibb.co/MxdJs82D/f9fdbe61aa39.png Captured: 2026-10-27 21:50:48 UTC - URLScan capture 1: https://urlscan.io/screenshots/01a17f56-a14c-751e-ab8b-0a872e195e64.png Captured: 2026-10-27 21:50:48 UTC Source report: https://urlscan.io/result/01a17f56-a14c-751e-ab8b-0a872e195e64/ - URLScan capture 2: https://screenshots.phishdestroy.io/01a17316-1485-72f7-b77f-83e337cac25b.png Captured: 2026-10-27 21:23:59 UTC Source report: https://urlscan.io/result/01a17f56-a14c-751e-ab8b-0a872e195e64/ - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17105-9b9d-72dd-9734-49ee1efbaad5.png Captured: 2026-10-25 03:06:05 UTC Source report: https://urlscan.io/result/01a17105-9b9d-72dd-9734-49ee1efbaad5/ SHA-256: 5d41f159deaed0e33084aa6a6a1b849c44d77f570e24a02354daa0ce1fd26b1d - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/ccc243fe-96de-4f62-8353-252eb6ead35a.png Captured: 2026-10-27 21:32:49 UTC Source report: https://radar.cloudflare.com/scan/ccc243fe-96de-4f62-8353-252eb6ead35a SHA-256: 38b91b5a5ac018ce6c864977d25fa25beb720ae59449a6cad4a60ab52893ee11 - URLQuery: https://screenshots.phishdestroy.io/uq/aa4857e9-4025-49fa-bcd3-d9a604b4b562.png Source report: https://urlquery.net/report/aa4857e9-4025-49fa-bcd3-d9a604b4b562 SHA-256: d3a0671f0e398375ef46b47acda934f0f05fdbf647cdeddec38d7d2ed9f1b805 - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17316-1485-72f7-b77f-83e337cac25b.png Captured: 2026-10-25 12:43:16 UTC Source report: https://urlscan.io/result/01a17316-1485-72f7-b77f-83e337cac25b/ SHA-256: 02f6b3e86fb40eabb2ea048ae395d1c1026f7d70ebd0c25e5556a4e32775f757 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-27T22:43:01Z", "uuid": "01a17f56-a14c-751e-ab8b-0a872e195e64", "scanned_at": "2026-10-27T21:49:16Z", "final_url": "https://streambanana.cyou/", "status": 200, "ip": "172.67.166.208", "domains": [ "image.tmdb.org", "platform-cdn.sharethis.com", "ps.eyeota.net", "match.adsrvr.org", "pixel.onaudience.com", "cm.g.doubleclick.net", "ups.analytics.yahoo.com", "tags.crwdcntrl.net", "bcp.crwdcntrl.net", "pd.sharethis.com", "t.dtscout.com", "l.sharethis.com", "d.turn.com", "de.tynt.com", "ic.tynt.com", "t.sharethis.com", "ib.adnxs.com", "target.digitalaudience.io", "cms.analytics.yahoo.com", "t.dtscdn.com", "p.mrktmtrcs.net", "cdn.tynt.com", "pxdrop.lijit.com", "count-server.sharethis.com", "e.dtscout.com", "s4.histats.com", "buttons-config.sharethis.com", "s10.histats.com", "static.cloudflareinsights.com", "platform-api.sharethis.com" ], "ips": [ "3.209.44.196", "108.138.128.124", "100.50.93.29", "69.194.242.14", "44.213.19.151", "72.28.123.108", "72.28.123.111", "23.34.59.15", "68.67.160.114", "52.7.171.223", "142.250.188.2", "69.147.92.12", "3.33.220.150", "37.187.82.222", "104.26.12.60" ], "asns": [ "14618", "16509", "26120", "36086", "20940", "29990", "15169", "14777", "16276", "13335" ], "countries": [ "US", "FR", "CA" ], "link_domains": [ "flixnetwork.to", "t.me", "streamsource.ws" ], "social": [ "https://t.me/+7YjmLuJQrclmZWE0" ], "doc_hash": "4c1876cbb5dd7483909f9b259cd3c93eca456b726c12cf165fe7bf013ddeb822", "globals": [ "dismissTgPopup", "_Hasync", "toggleMobile", "openSearch", "closeSearch", "doSearch", "getWatchlist", "saveWatchlist", "toggleWatchlist", "isInWatchlist", "initWatchlistButtons", "getHistory", "saveHistory", "addToHistory", "clearHistory", "renderWatchlistSection", "renderContinueSection", "openRandomPicker", "closeRandomPicker", "pickRandom", "showToast", "__cfBeacon", "st", "__stdos__", "tpcCookiesEnableCheckingDone", "tpcCookiesEnabledStatus", "__sharethis__docReady", "__sharethis__", "ua_fields", "chfh", "chfh2", "_HST_cntval", "Histats", "_HistatsCounterGraphics_0_setValues", "a", "cv", "Tynt", "_dtspv", "lotame_3825", "char" ], "cookies": [ "hv", "hv2", "HstCfa4739166", "HstCla4739166", "HstCmu4739166", "HstPn4739166", "HstPt4739166", "HstCnv4739166", "HstCns4739166", "c_ref_4739166", "df", "l", "fpestid", "__dtsu", "uid", "cookie", "done_redirects147", "__cf_bm", "TDID", "pids" ], "storage_keys": [ "__sharethis_local_storage_test__", "_dtspv", "st_shares_https://streambanana.cyou/", "_dtslplu", "__storage_test__", "mm", "_pubcid", "_cc_id", "_cc_cc", "_cc_aud", "panoramaId_expiry" ], "tls": { "san": [ "*.streambanana.cyou", "streambanana.cyou" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "streambanana.cyou", "protocol": "QUIC", "valid_to": "2027-01-22T05:35:40Z", "valid_from": "2026-10-24T05:35:41Z" }, "domain_age_days": 2, "apex_age_days": 2, "tls_age_days": 3, "tls_valid_days": 89, "requests": 91, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "geolocation=(), microphone=(), camera=()" } }, "cf": { "v": 1, "fetched_at": "2026-10-27T21:35:22Z", "uuid": "ccc243fe-96de-4f62-8353-252eb6ead35a", "scanned_at": "2026-10-27T21:32:49Z", "final_url": "https://streambanana.cyou/", "status": 200, "history": [ { "url": "https://streambanana.cyou/", "status": 200 } ], "dom_hash": "f2f81e96af457a242e49adaddeae6e7f715f31995f204c3074bc222a9f5f751e", "doc_hash": "4c1876cbb5dd7483909f9b259cd3c93eca456b726c12cf165fe7bf013ddeb822", "domain_risks": [ "New Domains", "Security Risks", "Newly Seen Domains", "CIPA Filter", "CIPA", "Movies", "Entertainment", "Questionable Activities", "Questionable Content", "Video Streaming" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "streambanana.cyou", "type": "A", "value": "104.21.41.190" }, { "name": "streambanana.cyou", "type": "A", "value": "172.67.166.208" }, { "name": "streambanana.cyou", "type": "AAAA", "value": "2606:4700:3031::ac43:a6d0" }, { "name": "streambanana.cyou", "type": "AAAA", "value": "2606:4700:3037::6815:29be" } ], "dnssec_valid": false, "ip": "127.0.1.14", "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-10-23T20:16:13Z", "expires": "2027-10-23T23:59:59Z", "nameservers": [ "evelyn.ns.cloudflare.com", "marek.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-27T21:31:47Z", "analysis_at": "2026-10-25T07:15:52Z", "stats": { "timeout": 0, "harmless": 50, "malicious": 1, "suspicious": 5, "undetected": 36 }, "detections": { "CRDF": "malicious", "Certego": "suspicious", "Fortinet": "spam", "SOCRadar": "suspicious", "Gridinsoft": "suspicious", "alphaMountain.ai": "spam" }, "reputation": 0, "categories": { "alphaMountain.ai": "Spam, Suspicious, Newly Registered (alphaMountain.ai)" }, "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-10-23T20:16:13Z", "expires": "2027-10-23T23:59:59Z", "updated": "2026-10-23T16:00:00Z", "first_seen": "2026-10-24T06:39:37Z", "dns": [ { "ttl": 300, "type": "AAAA", "value": "2606:4700:3031::ac43:a6d0" }, { "ttl": 300, "type": "A", "value": "104.21.41.190" }, { "ttl": 21600, "type": "NS", "value": "evelyn.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "evelyn.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3037::6815:29be" }, { "ttl": 21600, "type": "NS", "value": "marek.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.166.208" } ], "dns_at": "2026-10-25T07:16:48Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.streambanana.cyou", "streambanana.cyou" ], "issuer": "Let's Encrypt / YE1", "serial": "6ee31f3135326b2f584947f094a396d2abe", "sha256": "f2240f1cd4cddb75728756a70368a402cc4d070f4063a2b456cbea60a5602996", "subject": "streambanana.cyou", "valid_to": "2027-01-22T05:35:40Z", "valid_from": "2026-10-24T05:35:41Z" }, "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "registrar_iana_id": "3765", "registrar_url": "https://nicenic.com", "created": "2026-10-23T16:00:00Z", "updated": "2026-10-23T16:00:00Z", "expires": "2027-10-23T16:00:00Z", "status": [ "addPeriod", "clientDeleteProhibited", "clientTransferProhibited", "serverTransferProhibited" ], "nameservers": [ "evelyn.ns.cloudflare.com", "marek.ns.cloudflare.com" ], "dnssec": "unsigned" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-27T21:35:38Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "streambanana.cyou" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-27T21:28:37Z", "first": "2026-10-27T21:28:37Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 26623 }, "robots_txt": { "agents": [ "*", "GPTBot", "ClaudeBot", "meta-externalagent", "Bytespider" ], "present": true, "sitemaps": [ "https://streambanana.cyou/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 17 }, "social_tags": { "ogUrl": "https://streambanana.cyou/", "title": "StreamBanana", "author": "StreamBanana", "ogType": "website", "robots": "index, follow", "ogImage": "https://streambanana.cyou/img/capture.jpg", "ogTitle": "StreamBanana", "ogSiteName": "StreamBanana", "themeColor": "#0891b2", "description": "StreamBanana - Watch unlimited movies and TV shows online free in HD, 1080p, 4K quality. Stream latest releases, trending movies, popular TV series without registration or ads. StreamBanana is your #1 free streaming destination.", "twitterCard": "summary_large_image", "canonicalUrl": "https://streambanana.cyou/", "ogDescription": "StreamBanana - Watch unlimited movies and TV shows online free in HD, 1080p, 4K quality. Stream latest releases, trending movies, popular TV series without registration or ads. StreamBanana is your #1 free streaming destination." }, "trackers": { "requests": 51, "trackers": [ { "name": "DTScout", "company": "DTscout", "category": "Advertising", "requests": 2 }, { "name": "ShareThis", "company": "ShareThis, Inc.", "country": "US", "category": "Advertising", "requests": 17 }, { "name": "The Movie DB", "company": "The Movie DB", "category": "Misc", "requests": 27 }, { "name": "Histats", "company": "Histats", "country": "US", "category": "Site Analytics", "requests": 2 } ] }, "mixed_content": { "no_sri": [ "https://platform-api.sharethis.com/js/sharethis.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 3, "tls": 22, "wait": 49, "connect": 11, "download": 17 }, "response_ms": 102 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 252836, "co2_grams": 0.0092, "cleaner_than": 2 }, "dns_server": { "ns": [ { "ip": "172.64.34.213", "host": "evelyn.ns.cloudflare.com" }, { "ip": "108.162.193.202", "host": "marek.ns.cloudflare.com" } ], "zone": "streambanana.cyou" }, "cookies": { "cookies": [ { "name": "hv", "secure": true, "same_site": "Lax" }, { "name": "hv2", "secure": true, "same_site": "Lax" }, { "name": "HstCfa4739166" }, { "name": "HstCla4739166" }, { "name": "HstCmu4739166" }, { "name": "HstPn4739166" }, { "name": "HstPt4739166" }, { "name": "HstCnv4739166" }, { "name": "HstCns4739166" }, { "name": "df", "secure": true, "same_site": "None" } ] }, "location": { "ip": "2a06:98c1:3121::3", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "streambanana.cyou" }, "dns": { "A": [ "188.114.96.3", "188.114.97.3" ], "NS": [ "evelyn.ns.cloudflare.com", "marek.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"evelyn.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418329966, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3120::3", "2a06:98c1:3121::3" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000; includeSubDomains", "message": "HSTS header does not contain the preload directive." }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "strict-origin-when-cross-origin", "xXSSProtection": "1; mode=block", "permissionsPolicy": "geolocation=(), microphone=(), camera=()", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=31536000; includeSubDomains", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3121::3", "family": 6 }, "redirects": { "chain": [ "https://streambanana.cyou" ] }, "linked_pages": { "external": [ "https://t.me/+7YjmLuJQrclmZWE0", "https://flixnetwork.to/", "http://streamsource.ws/go-nordvpn" ], "external_count": 3, "internal_count": 172 }, "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-10-23T20:16:13Z", "updated": "2026-10-23T16:00:00Z", "expires": "2027-10-23T23:59:59Z", "status": [ "serverTransferProhibited https://icann.org/epp", "clientTransferProhibited https://icann.org/epp", "clientDeleteProhibited https://icann.org/epp", "addPeriod https://icann.org/epp" ], "nameservers": [ "evelyn.ns.cloudflare.com", "marek.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "geolocation=(), microphone=(), camera=()" } } } } ```