Security Review

Is hdd4.live legit or a scam?

Our verdict:Dangerous· 15/100

Fake Rocket League season-drops giveaway page impersonating Epic Games with phishing language and fabricated social-proof counters designed to harvest account credentials.

hdd4.liveScanned 1h ago
0
Trust score
DANGEROUS
Heuristics 8·MT 18
Category tags
phishinggaming-scamcredential-harvesting#Phishing#Fake Giveaway#Gaming Scam#Clone Site92% MT confidence
Warning signals (1)

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
0/98
All engines report clean
Domain Age
1.7 years old
Registered Sep 11, 2024
MT Intelligence
Dangerous
Critical likelihood · 92% confidence
DANGEROUS

Brand impersonation — not the real site

This page is styled as a brand but is not the brand's real site. Go to the official site directly, and treat any download, login, or payment request here as unsafe.

Website Preview

Screenshot of hdd4.live
LIVE RENDER
hdd4.live

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

72
/ 100
High visual risk

Visual red flags detected in the screenshot

The page replicates Rocket League visual branding to present a fake 'Season Drops' giveaway, featuring fabricated social-proof counters, artificial scarcity labels, and broken image placeholders — a pattern consistent with gaming-brand impersonation scam pages designed to harvest credentials or payments. No authoritative URL was visible to confirm or deny domain ownership.

Visual risk72/100

What our vision model saw

6 signals

Page impersonates Rocket League branding ('ROCKET LEAGUE SEASON DROPS') without a visible URL confirming this is an official Psyonix/Epic Games domain

Fake live-activity counters ('CLAIMED: 2,481', 'DROPS: 1,822', 'ONLINE: 512') used as social-proof urgency indicators typical of giveaway scam pages

Scarcity/urgency badge labels ('NEW', 'LIMITED', 'EXCLUSIVE') applied to in-game items to pressure engagement

Multiple broken 'postimage — image not found or was removed' placeholders in the Legendary Cars section, indicating hastily assembled or poorly maintained content

Unofficial third-party item-drop/giveaway format mimicking Rocket League's aesthetic — legitimate Rocket League drops are distributed only through the official game client or Epic Games store

No visible footer, privacy policy, terms of service, or any legitimate operator identification

Brand Impersonation

medium confidence

The page mentions or styles itself as Epic Games, but is hosted on a domain that is not an official Epic Games property.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Critical scam likelihoodengineMT · Guardiantrust18/100
MT AgentLive web researchVisual inspectionNetwork correlation
0%
Confidence
The page replicates Rocket League branding and presents itself as an official season-drops rewards portal, but runs on hdd4.live — a domain with no connection to Epic Games or Psyonix. The body text contains explicit phishing instructions: 'Action Required. Tap the three dots (···) at the top and select Open in Browser to verify your account and claim rewards.' Fake live-activity counters (2,481 claimed drops, 1,822 drops, 512 online) and artificial scarcity labels (NEW, LIMITED, EXCLUSIVE) are classic social-engineering tactics. The page lacks any legitimate operator identification, privacy policy, or terms of service. Our scanner detected phishing-pattern matches and Epic Games brand impersonation with medium-to-high confidence. The domain is hosted on a low-trust .live TLD, a pattern over-represented in scam farms. While one independent aggregator assigned a high trust score, our technical analysis, visual inspection, and scam-network fingerprinting all point to a credential-harvesting attack.
Full dossier
Analysis complete

Page Content

The page mimics Rocket League's official season-drops interface, displaying fake reward statistics ('CLAIMED: 2,481', 'DROPS: 1,822', 'ONLINE: 512') and in-game item listings (BMW M2, Air Jordan, Fennec, Octane, Dominus, Black Market Decals). The body text opens with 'Action Required' and instructs users to 'verify your account and claim rewards' — a classic phishing prompt. Multiple image placeholders are broken or missing, indicating hastily assembled content. No legitimate business contact information, privacy policy, or terms of service appear anywhere on the page.

Infrastructure

The domain hdd4.live is hosted on IP 216.239.38.21 with a valid SSL certificate issued by Google Trust Services (73 days to expiry). The IP has an abuse score of 0/100 but carries 2 abuse reports. The domain is 636 days old, registered via HOSTINGER operations, UAB, with privacy protection disabled. The page loads external resources from Tailwind CSS, Google Fonts, Cloudfront, Blogger, and image-hosting services — a mix typical of hastily constructed phishing pages.

Domain History

Registered approximately mid-2024 (636 days ago), hdd4.live sits on a low-trust .live TLD commonly exploited by scam farms. The domain is not indexed in global traffic rankings, indicating minimal legitimate traffic or visibility. WHOIS records show no privacy masking, but no legitimate business registration or operator details are associated with the domain.

Web Reputation

Our antivirus network flagged zero detections across 98 engines, and browser blocklists show the domain as clean — likely because the page is newly deployed or rotated frequently. However, our scam-network fingerprint detected clone-of:epicgames.com, template:phishing, and pattern:low-trust-tld signals. One independent aggregator assigned a trust score of 96 and deemed the site 'likely legit,' while another reported a low trust score and flagged high-risk activity based on 53 factors. The conflicting assessments reflect the aggregators' different methodologies; our technical and visual analysis strongly supports the phishing classification.

Risk Factors
7
  • Page impersonates Rocket League (Epic Games property) with fake season-drops interface and fabricated reward counters designed to create false urgency and social proof.
  • Contains explicit phishing language: 'Action Required. Verify your account and claim rewards' — a credential-harvesting prompt on a non-official domain.
  • Hosted on hdd4.live, a low-trust .live TLD with no legitimate business registration, operator identification, or contact information.
  • Multiple broken image placeholders and hastily assembled content indicate a low-effort, mass-produced phishing template.
  • Scam-network fingerprint confirms clone-of:epicgames.com, template:phishing, and pattern:low-trust-tld signals.
  • Domain lacks privacy policy, terms of service, footer, or any authoritative URL confirming official Epic Games or Psyonix ownership.
  • Fake live-activity counters ('CLAIMED: 2,481', 'DROPS: 1,822', 'ONLINE: 512') are social-engineering tactics to pressure engagement and bypass user skepticism.
Positive Signals
5
  • Valid SSL certificate issued by Google Trust Services with 73 days remaining.
  • Antivirus network shows zero detections across 98 engines.
  • Browser blocklists report the domain as clean.
  • One independent aggregator assigned a trust score of 96.
  • Hosting IP has an abuse score of 0/100 (though 2 abuse reports are present).
AI Recommendation
Do not enter your Epic Games account credentials, payment information, or personal data on this page. If you received a link to hdd4.live claiming to offer Rocket League rewards, report it to Epic Games immediately. Legitimate Rocket League drops are distributed only through the official game client or Epic Games store.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for hdd4.live, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
1.7 yrs
Registered Sep 2024
Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Clones epicgames.com
The page impersonates a well-known brand's site.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
1 scam report · 2 positive
Key findings
7 headline facts from open-web research
  • Domain age approximately 636 days (registered around mid-2024).
  • Site presents as a Rocket League rewards/season drops page with fake stats (2,482 claimed, 1,822 drops, 512 online) and Epic Games branding.
  • Contains classic phishing language: "Action Required. Tap the three dots (...) at the top and select 'Open in Browser' to verify your account and claim rewards."
  • Detected by scanner as exhibiting Phishing Patterns and Epic Games impersonation/clone attempt.
  • ScamAdviser reports high trust score (96) and deems it likely legit/reliable.
  • Scam-Detector reports low trust score and leans toward scam/high-risk based on 53 factors.
  • No user complaints, Reddit discussions, or specific scam reports found for hdd4.live.
Scam reports (1)
Direct quotes from public scam databases, forums, and news.
  • Scam-Detector.comopen

    "Is hdd4.live a scam ? Our low trust score leans toward "yes." Our in-depth review is based on 53 powerful factors we aggregated to expose high-risk activity"

Positive reviews (2)
Quotes indicating the site is legitimate.
  • ScamAdviseropen

    "In summary, hdd4.live is very likely not a scam but legit and reliable."

  • ScamAdviseropen

    "Why does hdd4.live have an average to good trust score? ... Trust Score 96."

Impersonation / typosquat
Clone of epicgames.com

Page content impersonates Rocket League (Epic Games title) with fake reward/season drops counters, 'verify your account and claim rewards' prompts, and 'Action Required' phishing-style instructions.

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Our research found one scam-report database flagging hdd4.live with a low trust score and high-risk classification based on 53 factors. Conversely, one independent aggregator assigned a trust score of 96 and rated the site as likely legitimate and reliable. This conflict reflects different assessment methodologies; the aggregator's high score may not account for the phishing-pattern and brand-impersonation signals detected by our technical analysis. No user complaints, Reddit discussions, or news-media reports were found for hdd4.live. The absence of public complaints is not unusual for a newly deployed or frequently rotated phishing page.

Scam Network Intelligence

Cross-site correlation

This site shares signals with a broader cluster

High correlation

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score
0/100
ClearLowModerateHighCritical
Evidence (3)
  • Evidence confirms this site is a clone of epicgames.com.
  • Phishing language detected (account verification / suspension warnings).
  • Short name on low-trust .live TLD — over-represented on scam farms.
Linked signals (3)
Clone of epicgames.comTemplate · PhishingPattern · LOW Trust TLD

Antivirus Engines

Clean pass · verified
Clean across 98 engines

We cross-check every URL against our antivirus network of 98 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious66Harmless98Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.
  • Page contains phishing language (account verification, suspension warnings, etc.).
  • Page impersonates Epic Games on a non-official domain.
  • Scam family match: Phishing Patterns.

Domain & Encryption

Domain History
Age1.7 years old
RegistrarHOSTINGER operations, UAB
RegisteredSep 11, 2024
ExpiresSep 11, 2026
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WR3
ExpiresAug 22, 2026 (73d)
Self-signedNo
Hosting & Technology
HostingGoogle LLC
Server locationUS
Web serverGSE
Platform / CMSWordPress

Redirect Chain

Hops
2
Cross-domain
Yes
Lookalike
No
Punycode
No
  • 1301http://hdd4.live/
  • 2301http://www.hdd4.live/cross-domain
  • 3200https://www.hdd4.live/cross-domain

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file2
ISPGoogle LLC
Usage typeContent Delivery Network

Scam-Type Likelihood

2 scam-type patterns detected
Scam-Type Likelihood

2 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Brand Impersonation
Brand Impersonation
High likelihood
75/100
  • Page claims to be Epic Games.
  • AI analyst tagged this as a brand / clone-site impersonation.
  • Clustered with known brand-impersonation infrastructure.
Phishing
Moderate likelihood
40/100
  • Phishing copy patterns in the scraped page.
  • Primary scraped category is phishing / credential-harvest.
  • AI analyst tagged this as phishing / data-harvesting.

Brand impersonation detected

This page is styled as a known brand but is not the brand's real site.

  • Do not interact with hdd4.live

    Do not enter credentials, deposit money, download files, or install browser extensions from this site.

  • Go to the brand's real site directly

    Type the brand name into a search engine or open it from your bookmarks — don't use links from emails, SMS, ads, or social posts, which are the delivery vectors for impersonation.

  • Never download or sign in here

    Even if the page "just" offers a download or a giveaway, impersonation pages frequently deliver malware or set up follow-up phishing. Assume anything accepted from this site is hostile.

  • Report the impersonation to the brand

    Most major brands have a dedicated abuse or anti-phishing reporting channel — reporting helps them take the site down and protects other users.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review flags hdd4.live as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
  • No — hdd4.live scored 15/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
  • Yes. hdd4.live presents a valid TLSv1.3 certificate issued by Google Trust Services · WR3, expiring in 73 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • hdd4.live is 1.7 years old, registered on 9/11/2024 through HOSTINGER operations, UAB. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • No. All 98 antivirus engines in our malware network report hdd4.live as clean.
  • No. hdd4.live is not currently listed on the major browser blocklist feeds that modern browsers use.
  • hdd4.live resolves to an IP operated by Google LLC in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 10, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around hdd4.live have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·hdd4.live
DANGEROUS

This is a phishing clone impersonating Rocket League's official rewards page. It uses fake drop counters and 'account verification' prompts to trick users into entering credentials on a non-official domain registered 636 days ago.

Do not enter your Epic Games account credentials, payment information, or personal data on this page. If you received a link to hdd4.live claiming to offer Rocket League rewards, report it to Epic Games immediately. Legitimate Rocket League drops are distributed only through the official game client or Epic Games store.

AV engines
98
MT passes
2
Net signals
3
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Dangerous reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.