pstream.org

pstream.org immediately redirects visitors to onlineresultsfinder.com with tracking parameters.

Critical Risk
Malware Delivery
Captured page preview of pstream.org

At a glance

Antivirus · registration · identity
Antivirus detections
6 flagged
4 malicious · 2 suspicious
ADMINUSLabs
Domain registration
Sep 18, 2024Registered
1.8 years oldAt scan time
Operator identity
Missing
No independently verifiable operator identity
Verified factsSaved with this scan
  1. 4 engines classified the URL as malicious and 2 as suspicious; 54 returned harmless, 32 returned undetected, and 0 returned no usable result.
  2. Operator identity: Missing. No independently verifiable operator identity
  3. gridinsoft.com: Pstream.org Scam Check: Blacklist Warning (1/100 Trust Score) Negative signals: security-provider warnings, multiple malware or phishing blacklist detections (9), a redirect to another domain (onlineresultsfinder.com), heuristic signals ass
  4. gridinsoft.com: pstream.org should not be treated as a safe website. Gridinsoft gives it a 1/100 trust score, and multiple security vendors blacklist the domain.
  5. The domain was registered Sep 18, 2024 and was 1.8 years old at scan time.

Intelligence

pstream.org functions as a redirector that sends visitors to a different domain carrying tracking parameters. The domain itself is only 1.8 years old, shows no operator identity, and receives a 1/100 trust score from Gridinsoft after 9-10 blacklist detections. Four antivirus engines classify the URL as malicious while the hosting IP carries an abuse-confidence score of 1/100.

Evidence Map

Reputation
Concern

One or more reputation sources recorded a concern

Identity
Limited

No independently verifiable operator identity

Behavior
Limited

Only partial behavior evidence was available

History
Observed

The domain was registered Sep 18, 2024 and was 1.8 years old at scan time.

Risk Factors
  • 14 antivirus engines flag the URL as malicious; 2 flag it suspicious
  • 2Gridinsoft 1/100 trust score citing 9-10 blacklist detections
  • 3Direct redirect to onlineresultsfinder.com carrying tracking parameters
  • 4Hosting IP carries 1/100 abuse-confidence score

Observed visitor journey

The page at http://pstream.org/ loads with the title "Redirecting..." and performs a direct forward to onlineresultsfinder.com/?dn=pstream.org&sksubid=516795 without any intermediate hops.

Domain registration details

The domain was registered on 18 September 2024 through GoDaddy.com, LLC and carries clientDeleteProhibited, clientRenewProhibited, clientTransferProhibited and clientUpdateProhibited status flags. No privacy-protection service was recorded on the registration.

Security-vendor signals

Four antivirus engines flag the URL as malicious and two mark it suspicious. Gridinsoft assigns a 1/100 trust score citing nine to ten blacklist detections and heuristic scam indicators. The hosting IP itself shows an abuse-confidence score of 1/100 from one report.

Page content and contact information

No contact email, phone number, postal address or social links appear on the captured page. The page contains neither a login form nor countdown timers or notification-bait copy.

Visual and technical observations

A valid TLSv1.3 certificate is presented. Screenshot capture was incomplete, leaving visual analysis inconclusive, yet no visual-clone indicators were recorded.

Website Preview

Captured page preview of pstream.org
Visual findings

We could not capture a fully-rendered screenshot of this page; visual analysis is inconclusive.

  1. 1Screenshot incomplete — site may be slow to render

Web Research

Gridinsoft reports that pstream.org redirects to onlineresultsfinder.com/?dn=pstream.org&sksubid=516795 and lists multiple malware or phishing blacklist detections.

Whois records confirm registration on 2024-09-18 via GoDaddy with an expiration date of 2026-09-18.

gridinsoft.com

Pstream.org Scam Check: Blacklist Warning (1/100 Trust Score) Negative signals: security-provider warnings, multiple malware or phishing blacklist detections (9), a redirect to another domain (onlineresultsfinder.com), heuristic signals ass

Single source
Source: gridinsoft.comView source
gridinsoft.com

pstream.org should not be treated as a safe website. Gridinsoft gives it a 1/100 trust score, and multiple security vendors blacklist the domain.

Single source
Source: gridinsoft.comView source
Whois pstream.org

Domain pstream.org registered 2024-09-18 via GoDaddy.com, LLC; expires 2026-09-18

Single source
Source: Whois pstream.orgView source
gridinsoft.com

Gridinsoft assigns 1/100 trust score citing 9-10 blacklist detections and heuristic scam signals

Single source
Source: gridinsoft.comView source
Pstream.org Scam Check: Blacklist Warning (1/100 Trust Score)

Page redirects to onlineresultsfinder.com/?dn=pstream.org&sksubid=516795

Single source
Source: Pstream.org Scam Check: Blacklist Warning (1/100 Trust Score)View source
Whois pstream.org

Registered On: 2024-09-18 Domain: pstream.org Updated On: 2025-11-04 Status: client delete prohibited client renew prohibited client transfer prohibited client update prohibited Expires On: 2026-09-18 GoDaddy.com, LLC

Single source
Source: whois.comView source
badwinton/pstream-providers

READ: Most sources marked with 🔥 or 🤝 are only avaliable on https://pstream.org Because these scrapers are getting harder and harder to maintain, as they get patched. We need to close-source them. This is unfortunate, but it's the reality of the pirating scene.

Single source
Source: github.comView source

Threat Detection

Antivirus results, browser warnings, isolated page observations, and the threat pattern identified in this report.

Antivirus distribution
Recorded engine classifications, not a blanket clean bill
92 engines
Malicious4
Suspicious2
Harmless54
Undetected32
No result0
Antivirus consensus

Antivirus engine results

Result date Jul 20, 2026
Detection matrix
6 engines flagged this URL

This scan saved classifications from an antivirus network of 92 engines. Each malicious or suspicious classification is listed below by engine name and should be weighed with the rest of the report.

4Malicious2Suspicious54Harmless32Undetected0No result92Engines
0
of 92
ADMINUSLabs
Malicious· malicious
alphaMountain.ai
Malicious· malicious
Chong Lua Dao
Malicious· malicious
Fortinet
Malicious· malware
Forcepoint ThreatSeeker
Suspicious· spam
Gridinsoft
Suspicious· suspicious

6 antivirus engines flagged this URL. A single classification is not consensus by itself. Review its label together with the page, identity, behavior, and history evidence shown in this report.

Threat pattern
Malware Delivery
Threat tags
malwareredirector
Top reasons

Evidence behind this threat profile

4 reasons
  1. 14 antivirus engines flag the URL as malicious; 2 flag it suspicious
  2. 2Gridinsoft 1/100 trust score citing 9-10 blacklist detections
  3. 3Direct redirect to onlineresultsfinder.com carrying tracking parameters
  4. 4Hosting IP carries 1/100 abuse-confidence score
Scam-Type Likelihood

2 of 22 categories showed signals

This profile separates the site's primary threat from other patterns supported by the saved page evidence, public research, and security findings.

Top match: Malware
Malware
High likelihood
82/100
  • ADMINUSLabs, alphaMountain.ai, Chong Lua Dao, and Fortinet flag the domain as malicious
  • Gridinsoft assigns 1/100 trust score citing multiple blacklist detections and heuristic scam signals
  • Page redirects to onlineresultsfinder.com/?dn=pstream.org&sksubid=516795
Redirector
High likelihood
75/100
  • Immediate redirect observed to external domain with affiliate-style tracking parameters
  • Title shows only 'Redirecting...'

Technical Details

Identity, domain, infrastructure, and connection facts saved with this scan.

July 21, 2026 at 7:03 AM UTC

Identity

6 facts
Operator
Missing
On-domain email
Not observed
Other email
Not observed
Phone
Not observed
Postal address
Not observed
Social profiles
Not observed

Domain

8 facts
Domain age
1.8 years old
Registered
Sep 18, 2024
Registrar
GoDaddy.com, LLC
Expires
Sep 18, 2026
WHOIS updated
Nov 3, 2025
Registrant
Unavailable
Registration country
Unavailable
WHOIS privacy
Not observed

Infrastructure

14 facts
HTTPS
Valid certificate
TLS protocol
TLSv1.3
Certificate issuer
Let's Encrypt · E7
Certificate subject
pstream.org
Certificate valid from
May 27, 2026
Certificate valid to
Aug 25, 2026
Network address
199.191.50.11
ASN
AS40034
Hosting organization
CONFLUENCE-NETWORK-INC - Confluence Networks Inc, VG
Country
VG
Server
openresty
Site platform
Unavailable
IP reputation
1% confidence · 1 reports
Tor exit node
No

Connections

13 facts
Scan scope
Domain
Destination host
pstream.org
Redirects
0
Cross-domain redirect
No
Redirect status codes
200
Lookalike characters
Not observed
Internationalized domain
No
Page response
200
Observation coverage
Complete
Extracted links
2
Unique IPs contacted
0
Countries contacted
6
Referenced domains
0

What to do

1
Before interacting
Do not download

Do not visit or interact with the site. The domain forwards visitors to a third-party destination while carrying multiple malicious classifications from security vendors.

2
If you already interacted

If you downloaded or opened a file, disconnect the device if it behaves unexpectedly, run a full security scan, remove anything installed from the page, and change important passwords from a different trusted device.

Final Verdict

Do not download

Why this verdict

The domain pstream.org, registered September 2024 via GoDaddy, presents a page titled "Redirecting..." that forwards to onlineresultsfinder.com and is flagged malicious by 4 antivirus engines plus multiple blacklists.

Recommendation

Do not visit or interact with the site. The domain forwards visitors to a third-party destination while carrying multiple malicious classifications from security vendors.

Key evidence

  1. 14 antivirus engines flag the URL as malicious; 2 flag it suspicious
  2. 2Gridinsoft 1/100 trust score citing 9-10 blacklist detections
  3. 3Direct redirect to onlineresultsfinder.com carrying tracking parameters
Evidence: strongScope: DomainFresh scan: July 21, 2026 at 7:03 AM UTC

Safety FAQ

Is pstream.org safe to use?+

The domain pstream.org, registered September 2024 via GoDaddy, presents a page titled "Redirecting..." that forwards to onlineresultsfinder.com and is flagged malicious by 4 antivirus engines plus multiple blacklists.

What should I do about pstream.org?+

Do not visit or interact with the site. The domain forwards visitors to a third-party destination while carrying multiple malicious classifications from security vendors.

How old is pstream.org?+

pstream.org is 1.8 years old and was registered sep 18, 2024.

What if I already interacted with pstream.org?+

If you downloaded or opened a file, disconnect the device if it behaves unexpectedly, run a full security scan, remove anything installed from the page, and change important passwords from a different trusted device.

When was this report updated?+

This report reflects the scan completed July 21, 2026 at 7:03 AM UTC.