streamyard[.]digital
“StreamYard”
Analysis of streamyard.digital indicates a newly registered domain that is being used for brand impersonation of StreamYard. The domain was created on February 21, 2026 and is registered through PDR Ltd. d/b/a PublicDomainRegistry.com. DNS resolution points to the IP address 172.67.198.1, which belongs to Cloudflare, Inc. (AS13335) and is located in the United States. The authoritative nameservers are arnold.ns.cloudflare.com and audrey.ns.cloudflare.com, confirming that the domain is hosted behind Cloudflare's reverse‑proxy service. No SSL certificate was observed, implying that HTTPS is not configured for the site.
The HTTP response is currently offline, and the domain has been taken down, but historical evidence shows that the page title returned "StreamYard," matching the target brand name. Threat intelligence sources have flagged the domain: AlienVault OTX recorded a single pulse referencing it, and VirusTotal reported that five of ninety‑three security vendors flagged the domain as malicious. Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on three external blocklists. It has also been blocked by PhishDestroy, MetaMask, and SEAL. The combination of a brand‑matching page title, low trust score, multiple vendor detections, and inclusion on blocklists strongly suggests a brand‑impersonation campaign.
Uncertainty remains regarding the exact payload or credential‑harvesting mechanism because the site is offline and no content was captured. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the domain or related subdomains, and update endpoint protection signatures to include the observed indicators. Ongoing surveillance of Cloudflare‑hosted IP ranges associated with this domain is advisable, as threat actors often recycle infrastructure.
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Evidence & External Reports
PD-20260130-AA995F Recipient: abuse@publicdomainregistry.com Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive