moviestreams[.]site

The domain moviestreams.site was observed on July 12, 2026 delivering a generic phishing campaign aimed at users looking for free movies and television streams. Threat intelligence classifies the site as high‑risk and active, with a generic phishing label applied by multiple sources. The page title returned by the server, “Stream Free Movies & TV Shows”, is typical of lure content used to entice victims.

Infrastructure analysis shows the domain was registered on May 8, 2026 through Namecheap Inc. and resolves to the IPv4 address 68.65.121.172, which belongs to ASN 22612 operated by Namecheap. The authoritative name servers dns1.namecheaphosting.com and dns2.namecheaphosting.com serve the domain, and the site presents a valid Sectigo DV certificate issued by Sectigo Public Server Authentication CA. HTTP requests receive a 302 redirect, a common technique to forward visitors to a malicious landing page.

VirusTotal reports that 2 of 95 scanned security vendors flag the domain, indicating limited detection coverage. The site appears on a single public blocklist and is currently listed by PhishDestroy as blocked. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. No additional evidence of payload delivery, credential harvesting forms, or malware drop has been disclosed, leaving the exact phishing vector uncertain.

Defenders should block DNS resolution for moviestreams.site at the network perimeter and add the IP address 68.65.121.172 to outbound deny lists. Email gateways should inspect URLs for the “Stream Free Movies & TV Shows” title pattern and quarantine messages containing the domain. Continuous monitoring of the Namecheap hosting infrastructure for new subdomains is advised, as the attacker may pivot to related domains. Incident response teams should also advise users to avoid clicking links promising free streaming content and to report any credential submission attempts to the appropriate security channel.