fstream.
F-Stream at fstream.app presents itself as a free streaming site for movies and shows.
At a glance
Antivirus · registration · identity- Operator identity: Missing. No independently verifiable operator identity
- No engine classified the URL as malicious or suspicious in this scan; 56 returned harmless, 36 returned undetected, and 0 returned no usable result.
- The domain was registered Oct 14, 2025 and was 9 months old at scan time.
- Google Safe Browsing returned no listed threat categories for this address at scan time.
- The site presented a valid TLSv1.3 certificate at scan time.
Intelligence
The page claims to offer ad-supported free streaming and directs users to install browser extensions when playback fails, while providing no contact details or verifiable operator information.
Evidence Map
Multiple reputation sources returned usable results
No independently verifiable operator identity
Only partial behavior evidence was available
The domain was registered Oct 14, 2025 and was 9 months old at scan time.
- 1No contact email, phone, or postal address listed on the page
- 2Domain registered only nine months ago with missing operator identity
- 1No antivirus engine flagged the URL as malicious or suspicious
- 2Google Safe Browsing returned no listed threat categories
- 3Valid TLSv1.3 certificate presented at scan time
- 4Hosting IP abuse-confidence score of 0/100 from zero reports
Site purpose and visitor journey
The observed page at http://fstream.app/ displays the title "F-Stream" and describes itself as a place to watch shows and movies for free with no ads ever. The excerpt instructs visitors that the site uses cookies and ads, recommends ad blockers such as Brave or uBlock, and tells users to refresh the player or install a Chrome or Firefox extension if sources fail to play.
Operator identity and contact signals
No domain email, free-mail address, phone number, postal address, or social link entries were recorded on the page. The domain itself was registered on 14 October 2025 and is nine months old at scan time, with no independently verifiable operator identity observed.
Technical and security observations
The site presented a valid TLSv1.3 certificate. The saved redirect path contained one hop with no cross-domain, homoglyph, or internationalized-domain indicators. The hosting IP carried an abuse-confidence score of 0/100 from zero reports. No engine classified the URL as malicious or suspicious; 56 engines returned harmless and 36 returned undetected. Google Safe Browsing listed no threat categories.
Visual and functional observations
The page capture recorded an intrusive pop-up notification in the bottom right corner discussing ad-blocking and site monetization, a generic "What would you like to watch" interface, and Discord plus social icons. No login form, countdown timer, or deceptive notification-bait copy was observed. The visual risk score was recorded at 75/100 with no clone indicator present.
Website Preview
The site exhibits characteristics typical of illicit streaming platforms, including intrusive pop-ups regarding ad-blockers and a template-heavy design often used to distribute malicious advertisements.
- 1Intrusive pop-up notification in the bottom right corner explicitly discussing ad-blocking and site monetization
- 2High-risk category: unauthorized streaming site typically associated with malvertising
- 3Generic 'What would you like to watch' interface common in template-based streaming scam sites
- 4Presence of Discord and social icons often used to build fake community trust on illicit streaming platforms
Web Research
Open-web source matches the page excerpt directing users to install browser extensions when playback fails and acknowledging ads on the site.
Threat Detection
Antivirus results, browser warnings, isolated page observations, and the threat pattern identified in this report.
Antivirus engine results
Evidence behind this threat profile
- 1No contact email, phone, or postal address listed on the page
- 2Domain registered only nine months ago with missing operator identity
No supported scam pattern identified
This profile separates the site's primary threat from other patterns supported by the saved page evidence, public research, and security findings.
Review the antivirus, identity, domain, and research findings before sharing money, credentials, personal data, or wallet access.
Technical Details
Identity, domain, infrastructure, and connection facts saved with this scan.
July 20, 2026 at 10:06 AM UTCIdentity
6 facts- Operator
- Missing
- On-domain email
- Not observed
- Other email
- Not observed
- Phone
- Not observed
- Postal address
- Not observed
- Social profiles
- Not observed
Domain
8 facts- Domain age
- 9 months old
- Registered
- Oct 14, 2025
- Registrar
- Namecheap Inc.
- Expires
- Oct 14, 2026
- WHOIS updated
- Oct 19, 2025
- Registrant
- Unavailable
- Registration country
- Unavailable
- WHOIS privacy
- Not observed
Infrastructure
14 facts- HTTPS
- Valid certificate
- TLS protocol
- TLSv1.3
- Certificate issuer
- Google Trust Services · WE1
- Certificate subject
- fstream.app
- Certificate valid from
- Jun 27, 2026
- Certificate valid to
- Sep 25, 2026
- Network address
- 104.21.47.66
- ASN
- Unavailable
- Hosting organization
- Cloudflare, Inc.
- Country
- US
- Server
- cloudflare
- Site platform
- Unavailable
- IP reputation
- 0% confidence · 0 reports
- Tor exit node
- No
Connections
13 facts- Scan scope
- Domain
- Destination host
- fstream.app
- Redirects
- 1
- Cross-domain redirect
- No
- Redirect status codes
- 301 → 200
- Lookalike characters
- Not observed
- Internationalized domain
- No
- Page response
- 200
- Observation coverage
- Unavailable
- Extracted links
- Unavailable
- Unique IPs contacted
- Unavailable
- Countries contacted
- Unavailable
- Referenced domains
- 9
What to do
Treat the site as an unauthorized streaming platform that relies on ads and third-party extensions; use an ad blocker and avoid installing any suggested extensions or providing login credentials.
No incident response is indicated by this scan. Continue using normal caution, and act only if you notice an unexpected download, login prompt, payment request, or account activity.
Final Verdict
Why this verdict
The site shows a generic streaming interface with no operator identity, a 9-month-old domain, and no antivirus or browser warnings, resulting in a safe verdict.
Treat the site as an unauthorized streaming platform that relies on ads and third-party extensions; use an ad blocker and avoid installing any suggested extensions or providing login credentials.
Key evidence
- 1No antivirus engine flagged the URL as malicious or suspicious
- 2Google Safe Browsing returned no listed threat categories
- 3Valid TLSv1.3 certificate presented at scan time
Safety FAQ
Is fstream.app safe to use?+
The site shows a generic streaming interface with no operator identity, a 9-month-old domain, and no antivirus or browser warnings, resulting in a safe verdict.
What should I do about fstream.app?+
Treat the site as an unauthorized streaming platform that relies on ads and third-party extensions; use an ad blocker and avoid installing any suggested extensions or providing login credentials.
How old is fstream.app?+
fstream.app is 9 months old and was registered oct 14, 2025.
What if I already interacted with fstream.app?+
No incident response is indicated by this scan. Continue using normal caution, and act only if you notice an unexpected download, login prompt, payment request, or account activity.
When was this report updated?+
This report reflects the scan completed July 20, 2026 at 10:06 AM UTC.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.