hlktv[.]com

PhishDestroy has identified the domain hlktv.com as a generic phishing threat with elevated risk, specifically designed to impersonate the legitimate esports portal HLTV.org. The fraudulent site aimed to deceive users by mimicking the look and feel of HLTV.org, a popular destination for Counter-Strike 2 news and statistics. No specific crypto drainer kit was identified, but the domain likely targeted users' credentials through fake login pages.

Technical analysis reveals critical indicators of malicious intent. The domain resolves to IP address 188.114.96.3 and uses an SSL certificate issued by Google Trust Services, which may lend a false sense of security. VirusTotal flagged the domain with a score of 1/95, indicating that at least one security vendor identified it as malicious. The registrar is NICENIC INTERNATIONAL GROUP CO., LIMITED, and the domain was created on March 27, 2026, which is notably recent. It appears on one security blocklist and has been found in eight threat intelligence pulses on AlienVault OTX, underscoring its threat footprint.

The domain is currently offline, having been taken down after PhishDestroy's alerting and coordination with relevant authorities. While the immediate risk is mitigated, users who may have visited the site during its active period should remain cautious. PhishDestroy advises users to verify any HLTV.org URLs by checking directly at hltv.org and never entering credentials on lookalike domains. For ongoing protection, users are encouraged to use PhishDestroy's verification tools and report any similar suspicious domains.