wwwhltv[.]com

This domain, wwwhltv.com, is identified as a credential-harvesting phishing site targeting users of the streaming service HBO Max. Analysis indicates the domain is currently offline, though it previously hosted infrastructure designed to mimic legitimate login portals to capture user credentials. The threat type is classified as generic_phishing with an elevated risk level due to its targeted impersonation of a widely recognized brand. Infrastructure analysis reveals the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 27, 2026, and resolved to the IP address 188.114.97.3. Detection metrics show the domain was flagged by 2 of 95 security vendors on VirusTotal, while appearing on a single security blocklist. Additionally, the domain is referenced in 8 threat intelligence pulses within AlienVault OTX. The SSL certificate is issued by Google Trust Services, a common tactic to lend an appearance of legitimacy to malicious sites. At present, wwwhltv.com has been taken offline, though the underlying infrastructure may remain dormant for future reactivation. Organizations and users are advised to implement blocklist updates to prevent access if the domain resurfaces. Network-level monitoring should be enforced for connections to 188.114.97.3, and security teams should review logs for prior interactions with the domain. End-users should be educated on recognizing phishing indicators, particularly in credential submission portals impersonating streaming services.