Security Review

Is hll-tv.com legit or a scam?

Our verdict:Dangerous· 3/100

A malicious clone of HLTV.org created 7 days ago to harvest Counter-Strike player credentials through deceptive login prompts.

hll-tv.comScanned 2h ago
0
Trust score
DANGEROUS
Heuristics 0·MT 5
Category tags
phishinggaming scam#phishing#gaming scam#clone site95% MT confidence

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
2/92
Engines flagged this URL
Domain Age
7 days old
Registered Jun 21, 2026
MT Intelligence
Dangerous
Critical likelihood · 95% confidence
DANGEROUS

Brand impersonation — not the real site

Domain was registered only 7 days ago — brand-new sites are higher-risk by default. This page is styled as a brand but is not the brand's real site. Go to the official site directly, and treat any download, login, or payment request here as unsafe.

Website Preview

Screenshot of hll-tv.com
LIVE RENDER
hll-tv.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

0
/ 100
No visual red flags

No scam visual patterns detected

The page displays a highly professional and functional interface for a well-known esports news site, showing no visual indicators of scam or phishing patterns.

Visual risk0/100

What our vision model saw

6 signals

Professional layout consistent with a high-traffic esports news and statistics portal

Complex, functional navigation menu with multiple sub-categories

Dynamic content including live match schedules, news feeds, and community forums

Consistent branding for HLTV throughout the page elements

No deceptive urgency tactics, fake trust badges, or suspicious pop-ups detected

Presence of legitimate advertisements and community-driven interaction metrics

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Critical scam likelihoodengineMT · Guardiantrust5/100
MT AgentLive web researchVisual inspectionNetwork correlation
0%
Confidence
The site is a pixel-perfect clone of the well-known Counter-Strike news portal HLTV.org, but it is hosted on a typosquatted domain registered just one week ago. Our analysis detected multiple security flags from engines like SOCRadar and Fortinet, which identify the site as a phishing and spam threat. While the visual layout appears professional, it is entirely copied from the original source to deceive users into logging in. Furthermore, the page includes suspicious calls to action like 'Synchronize your in-game settings' and 'Install your pickets,' which are common lures used in gaming-related credential theft. The lack of any legitimate business registration or contact information confirms this is a fraudulent operation.
Full dossier
Analysis complete

Page Content

The site's content is a verbatim copy of the legitimate HLTV.org, including news headlines, player rankings, and forum posts. However, it introduces deceptive elements such as a 'Remember me' login form and urgent countdown timers designed to pressure users into taking action.

Infrastructure

The domain was registered on June 21, 2026, through a registrar often associated with short-lived malicious sites. It uses a valid SSL certificate to appear secure, but the underlying hosting IP has no established reputation and is not indexed in global traffic rankings.

Domain History

This is a brand-new domain with only 7 days of history. It uses a typosquatting technique (hll-tv.com instead of hltv.org) to trick users who might misspell the official URL or follow a deceptive link.

Web Reputation

The site has already been blacklisted by independent phishing databases. Security analysts have confirmed it is part of a credential-harvesting network targeting the Counter-Strike community, specifically looking to hijack Steam or FACEIT accounts.
Risk Factors
7
  • Domain is only 7 days old and lacks any established reputation.
  • Identified as a clone of the legitimate hltv.org website.
  • Flagged as phishing by SOCRadar and as a spam source by Fortinet.
  • Listed as an active phishing threat on independent security databases.
  • Uses a typosquatted domain name to impersonate a popular esports brand.
  • Contains deceptive 'synchronization' prompts typical of gaming account theft.
  • No verifiable business registration or corporate contact details provided.
Positive Signals
1
  • The site uses a valid SSL certificate for encrypted connections.
AI Recommendation
Do not interact with this website or enter any login credentials. If you have already entered your password, change it immediately on the official HLTV, Steam, or FACEIT platforms and enable two-factor authentication.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for hll-tv.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
7 days
Registered Jun 2026
Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Clones hltv.org
The page impersonates a well-known brand's site.
Typosquat check
Typosquat of hltv.org
Deliberate misspelling of a real brand's domain.
Web mentions
1 scam report
Key findings
7 headline facts from open-web research
  • Domain registered approximately 7 days ago (as of June 28, 2026)
  • Homepage fully clones HLTV.org with identical title "HLTV.org - Official Website :: News and reports about Counter-Strike 2", matching description, CS2 news articles, player rankings, transfers, and live streams section
  • Contains suspicious non-gaming elements including "Install your pickets", "+ Synchronize your in-game settings", "elections", and "Final begins SOON" which align with reported Countdown/Urgency scam patterns
  • Listed as an active suspected phishing site on PhishTank (submitted June 28, 2026)
  • Appears in recent urlscan.io sitemap alongside other scanned domains, indicating security tool scrutiny
  • No official business registration, contact details, or legitimate company information identified
  • No positive reviews, Trustpilot/ScamAdviser entries, or mentions of legitimacy found
Scam reports (1)
Direct quotes from public scam databases, forums, and news.
  • PhishTankopen

    "https://hll-tv.com/ added on Jun 28th 2026 12:21 PM, by tuanphuong, Unknown, ONLINE"

Impersonation / typosquat
Typosquat of hltv.org

Page title, description, news headlines, rankings, transfers, and forum-style content are copied verbatim from the legitimate HLTV.org Counter-Strike site

Research summary
Narrative write-up from our AI analyst, grounded on the facts above
We found confirmed scam reports on phishing databases like PhishTank, where this URL was flagged as an active threat on June 28, 2026. Our research confirms the site is a complete clone of HLTV.org, copying its news, rankings, and layout to appear legitimate. No business registration or positive consumer reviews exist for this domain, which is consistent with a newly created phishing front.

Scam Network Intelligence

Cross-site correlation

This site shares signals with a broader cluster

Critical cluster

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score
0/100
ClearLowModerateHighCritical
Evidence (3)
  • Evidence confirms this site is a clone of hltv.org.
  • Domain is a typosquat of hltv.org.
  • Domain is only 7 days old and already carries multiple network-level red flags.
Linked signals (2)
Clone of hltv.orgTyposquat of hltv.org

Antivirus Engines

Detection matrix · live
2 engines flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

1Malicious1Suspicious56Harmless92Engines
0
of 92
SOCRadar
Malicious· phishing
Fortinet
Suspicious· spam

2 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbers2014-2025
Postal addressPresent
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • Countdown timer or 'limited time' urgency pressure detected.
  • Scam family match: Countdown / Urgency.
  • Phone number listed (2014-2025).
  • Postal address visible on the page.

Domain & Encryption

Domain History
Age7 days old
RegistrarNICENIC INTERNATIONAL GROUP CO., LIMITED
RegisteredJun 21, 2026
ExpiresJun 21, 2027
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
ExpiresSep 19, 2026 (82d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
Web servercloudflare

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Scam-Type Likelihood

2 scam-type patterns detected
Scam-Type Likelihood

2 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Brand Impersonation
Brand Impersonation
Moderate likelihood
50/100
  • Domain is a typosquat of hltv.org.
  • AI analyst tagged this as a brand / clone-site impersonation.
  • Clustered with known brand-impersonation infrastructure.
Phishing
Moderate likelihood
35/100
  • Domain is a typosquat of hltv.org.
  • AI analyst tagged this as phishing / data-harvesting.

Brand impersonation detected

This page is styled as a known brand but is not the brand's real site.

  • Do not interact with hll-tv.com

    Do not enter credentials, deposit money, download files, or install browser extensions from this site.

  • Go to the brand's real site directly

    Type the brand name into a search engine or open it from your bookmarks — don't use links from emails, SMS, ads, or social posts, which are the delivery vectors for impersonation.

  • Never download or sign in here

    Even if the page "just" offers a download or a giveaway, impersonation pages frequently deliver malware or set up follow-up phishing. Assume anything accepted from this site is hostile.

  • Report the impersonation to the brand

    Most major brands have a dedicated abuse or anti-phishing reporting channel — reporting helps them take the site down and protects other users.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review flags hll-tv.com as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
  • No — hll-tv.com scored 3/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
  • Yes. hll-tv.com presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 82 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • hll-tv.com is 7 days old, registered on 6/21/2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • 2 out of 92 antivirus engines in our malware network flagged hll-tv.com as malicious or suspicious (1 outright malicious). Even one detection is a meaningful signal.
  • No. hll-tv.com is not currently listed on the major browser blocklist feeds that modern browsers use.
  • hll-tv.com resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 28, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around hll-tv.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·hll-tv.com
DANGEROUS

This is a malicious phishing site that clones the legitimate HLTV.org esports platform to steal user credentials. It was registered only 7 days ago and has already been flagged by multiple security engines. Do not enter your login details or synchronize any game settings on this page.

Do not interact with this website or enter any login credentials. If you have already entered your password, change it immediately on the official HLTV, Steam, or FACEIT platforms and enable two-factor authentication.

AV engines
92
MT passes
2
Net signals
2
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Dangerous reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.