hdtodayz.to
hdtodayz.to is a confirmed clone of the pirate streaming site hdtoday.tv that has been tied to Lumma info-stealer malware campaigns.
At a glance
3 facts that matterThe Dossier
The domain hdtodayz.to presents itself as an unauthorized streaming platform for movies and TV shows. It is explicitly identified as a clone of the established pirate site hdtoday.tv and belongs to a network of similar domains used to evade blocks. Security vendors have linked the site to large-scale fake captcha campaigns that deliver the Lumma information-stealing malware. The domain carries very low trust scores from multiple scanners and lacks any legitimate business registration.
- 1Confirmed clone of hdtoday.tv pirate streaming network
- 2Linked to fake captcha campaigns distributing Lumma info-stealer
- 3Scam Detector trust score of 10.5 (untrustworthy)
- 4Gridinsoft score 28/100 with multiple vendor blacklists
- 5No legitimate business registration
- 1Domain registered for 2 years
- 2Hosting IP shows zero abuse reports
- 3Valid SSL certificate
Site Purpose and Operation
hdtodayz.to functions as an unauthorized streaming platform offering access to copyrighted movies and television content without a license. The site is part of a rotating network of pirate domains that frequently change to bypass enforcement actions.
Clone Relationship
Technical evidence confirms hdtodayz.to is a direct clone of hdtoday.tv. These clone domains share naming patterns and serve the same illegal streaming purpose, allowing operators to replace blocked versions quickly.
Malware Association
Guardio Labs tracked the domain as part of a widespread fake captcha campaign that distributes the Lumma info-stealer malware. Visitors who interact with the site risk malware infection through these deceptive captcha pages.
Trust and Registration Signals
The domain was registered in July 2024 and carries a valid SSL certificate. However, it has no legitimate business registration and is classified as high-risk by multiple security vendors. Scam Detector assigned a trust score of 10.5, while Gridinsoft rated it 28/100 with several vendors blacklisting the domain.
Technical Observations
Live page capture attempts returned server errors, preventing direct visual analysis. The domain shows zero abuse reports on its hosting IP, but this does not offset the confirmed malware distribution activity.
Do not visit or interact with hdtodayz.to. Avoid entering any personal information, passwords, or payment details. Use reputable, licensed streaming services instead.
Website Preview
We could not load a live view of this site; the capture returned a server error.
- 1Live capture returned a server/proxy error — the page could not be rendered
Web Research
The Scam Detector website Validator gives hdtodayz.to one of the lowest trust scores on the platform: 10.5. It signals that the business could be defined by the following tags: Untrustworthy. Risky. Danger.
Gridinsoft gives it a 28/100 trust score, and multiple security vendors blacklist the domain. Avoid entering passwords, personal details, or payment data.
Guardio Labs tracked and analyzed a large-scale fake captcha campaign distributing a disastrous Lumma info-stealer malware... to hdtodayz[.]to
The domain is part of a network of pirate streaming sites often using similar names (e.g., hdtoday.tv, hdtoday.cc) to bypass blocks or replace defunct versions.
Threat Detection
Antivirus results, browser warnings, isolated page observations, and the threat pattern identified in this report.
Antivirus engine results
Technical Details
Identity, domain, infrastructure, and connection facts saved with this scan.
July 18, 2026 at 9:05 AM UTCIdentity
6 facts- Operator
- Missing
- On-domain email
- Not observed
- Other email
- Not observed
- Phone
- Not observed
- Postal address
- Not observed
- Social profiles
- Not observed
Domain
8 facts- Domain age
- 2.0 years old
- Registered
- Jul 18, 2024
- Registrar
- Government of Kingdom of Tonga
- Expires
- Jul 18, 2026
- WHOIS updated
- Jul 20, 2024
- Registrant
- Unavailable
- Registration country
- Unavailable
- WHOIS privacy
- Not observed
Infrastructure
14 facts- HTTPS
- Valid certificate
- TLS protocol
- TLSv1.3
- Certificate issuer
- Google Trust Services · WE1
- Certificate subject
- hdtodayz.to
- Certificate valid from
- Jun 30, 2026
- Certificate valid to
- Sep 28, 2026
- Network address
- 172.67.164.13
- ASN
- Unavailable
- Hosting organization
- Cloudflare, Inc.
- Country
- US
- Server
- Unavailable
- Site platform
- Unavailable
- IP reputation
- 0% confidence · 0 reports
- Tor exit node
- No
Connections
12 facts- Scan scope
- Domain
- Destination host
- hdtodayz.to
- Redirects
- 0
- Cross-domain redirect
- No
- Redirect status codes
- 301
- Lookalike characters
- Not observed
- Internationalized domain
- No
- Page response
- 522
- Page requests
- Unavailable
- Unique IPs contacted
- Unavailable
- Countries contacted
- Unavailable
- Referenced domains
- 0
Identity6 facts›
- Operator
- Missing
- On-domain email
- Not observed
- Other email
- Not observed
- Phone
- Not observed
- Postal address
- Not observed
- Social profiles
- Not observed
Domain8 facts›
- Domain age
- 2.0 years old
- Registered
- Jul 18, 2024
- Registrar
- Government of Kingdom of Tonga
- Expires
- Jul 18, 2026
- WHOIS updated
- Jul 20, 2024
- Registrant
- Unavailable
- Registration country
- Unavailable
- WHOIS privacy
- Not observed
Infrastructure14 facts›
- HTTPS
- Valid certificate
- TLS protocol
- TLSv1.3
- Certificate issuer
- Google Trust Services · WE1
- Certificate subject
- hdtodayz.to
- Certificate valid from
- Jun 30, 2026
- Certificate valid to
- Sep 28, 2026
- Network address
- 172.67.164.13
- ASN
- Unavailable
- Hosting organization
- Cloudflare, Inc.
- Country
- US
- Server
- Unavailable
- Site platform
- Unavailable
- IP reputation
- 0% confidence · 0 reports
- Tor exit node
- No
Connections12 facts›
- Scan scope
- Domain
- Destination host
- hdtodayz.to
- Redirects
- 0
- Cross-domain redirect
- No
- Redirect status codes
- 301
- Lookalike characters
- Not observed
- Internationalized domain
- No
- Page response
- 522
- Page requests
- Unavailable
- Unique IPs contacted
- Unavailable
- Countries contacted
- Unavailable
- Referenced domains
- 0
What to do
Do not visit or interact with hdtodayz.to. Avoid entering any personal information, passwords, or payment details. Use reputable, licensed streaming services instead.
If you downloaded or opened a file, disconnect the device if it behaves unexpectedly, run a full security scan, remove anything installed from the page, and change important passwords from a different trusted device.
Final Verdict
Why this verdict
Malicious – piracy site distributing malware via fake captcha pages.
Do not visit or interact with hdtodayz.to. Avoid entering any personal information, passwords, or payment details. Use reputable, licensed streaming services instead.
Key evidence
- 1Confirmed clone of hdtoday.tv pirate streaming network
- 2Linked to fake captcha campaigns distributing Lumma info-stealer
- 3Scam Detector trust score of 10.5 (untrustworthy)
Safety FAQ
Is hdtodayz.to safe to use?+
Malicious – piracy site distributing malware via fake captcha pages.
What should I do about hdtodayz.to?+
Do not visit or interact with hdtodayz.to. Avoid entering any personal information, passwords, or payment details. Use reputable, licensed streaming services instead.
How old is hdtodayz.to?+
hdtodayz.to is 2.0 years old and was registered jul 18, 2024.
What if I already interacted with hdtodayz.to?+
If you downloaded or opened a file, disconnect the device if it behaves unexpectedly, run a full security scan, remove anything installed from the page, and change important passwords from a different trusted device.
When was this report updated?+
This report reflects the scan completed July 18, 2026 at 9:05 AM UTC.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.