shemales[.]stream

PhishDestroy analysts have identified shemales.stream as an active phishing site designed to mimic adult content platforms. The domain serves deceptive login pages to harvest user credentials and personal data. Victims may unknowingly expose sensitive information, risking financial loss or identity theft. This domain was flagged after PhishDestroy’s automated systems detected phishing indicators. Key red flags include a VirusTotal detection rate of 1/95, a domain creation date of August 06, 2018, and registration through Porkbun. The site resolves to IP 104.21.51.23 and is blocked by MetaMask, with one known security blocklist entry. Despite a Google Trust Services SSL certificate, the site’s low detection rate and age raise suspicion. If you visited shemales.stream, immediately change passwords for any accounts entered on the site. Scan your devices for malware and monitor financial accounts for suspicious activity. Avoid clicking links from unsolicited emails or ads. Report the domain to your security team or through PhishDestroy’s portal to help protect others.