streaming-community.stream: Credential Harvesting Site

This domain, streaming-community.stream, is flagged as a generic phishing site designed to impersonate legitimate streaming platforms. Analysis indicates the infrastructure mimics user interfaces of popular streaming services to harvest login credentials, payment details, or personal information. The site employs front-end frameworks such as Bootstrap and Vue.js, alongside tracking tools like Yandex.Metrika, suggesting an intent to monitor victim interactions or exfiltrate data. No specific drainer kit signatures were identified, but the use of Cloudflare and HSTS indicates an attempt to appear legitimate while evading basic detection mechanisms. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, and currently resolves to the IP address 188.114.96.3. VirusTotal reports 6 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and is blocked by at least one threat intelligence feed. The SSL certificate is issued by Google Trust Services, further complicating automated detection due to its valid cryptographic properties. As of the latest assessment, streaming-community.stream has been taken offline, reducing immediate risk to users. However, the infrastructure remains a potential threat due to the domain's recent creation date and the registrar's history of hosting malicious sites. Organizations are advised to monitor for related domains or IPs, particularly those resolving to the same Cloudflare IP range. Users should verify the authenticity of streaming-related communications and avoid entering credentials on untrusted platforms. The elevated risk classification persists until the domain's registration is revoked or additional mitigations are confirmed.