hdstreamz[.]ru

Analysis of hdstreamz.ru confirms an active phishing domain distributing fraudulent mobile applications under the guise of an official HD Streamz TV and sports streaming app. The domain, registered on December 4, 2025, through REGTIME-RU, currently resolves to IP address 188.114.96.3 and is protected by Cloudflare infrastructure. The site's page title explicitly advertises 'HD STREAMZ (Official) V3.12.0 : Download Latest Hd Streamz App, Mobile Tv App, Live Tv Sports app for Android,' suggesting an attempt to deceive users into downloading malicious software. Multiple security sources have flagged this domain. It appears on three independent blocklists and is referenced in four threat intelligence pulses on AlienVault OTX. Detection engines from SEAL, MetaMask, and PhishDestroy have blocked access, and four out of 95 security vendors on VirusTotal identify the domain as malicious. The site employs common web technologies including Bootstrap, jQuery, Google Tag Manager, and Google Analytics, which may be used to track user interactions or facilitate further exploitation. The domain's trust score is notably low at 28/100, reinforcing its high-risk classification. While the exact payload or malware family distributed via this domain is not yet confirmed, the combination of its page title, registration details, and detection by multiple security vendors indicates a deliberate phishing operation targeting users seeking legitimate streaming applications. Defenders should treat this domain as malicious and block it at the network level. Further analysis of the hosted application is recommended to determine the full scope of compromise.