SUSPICIOUS

Warning signs detected

Educational streaming site for orofacial harmonization courses with Russian casino spam text injected into the page source. Several risk indicators suggest caution. This site might be legitimate — but treat it as unverified until you can independently confirm.

Security Review

Is hofplay.com.br legit or a scam?

Our verdict:Suspicious· 55/100

Educational streaming site for orofacial harmonization courses with Russian casino spam text injected into the page source.

hofplay.com.brScanned 1h ago
0
Trust score
SUSPICIOUS
Score breakdown
Heuristics 75·MT 45
Screenshot of hofplay.com.brSee the live page ↓
Category tags
educationonline course75% MT confidence
Positive signals (5)
Antivirus clearNot on major blacklistsDomain is 3 years oldEncrypted connectionClean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
3 years old
Registered Sep 6, 2023
Intelligence
Suspicious
Moderate likelihood · 75% confidence

Website Preview

Screenshot of hofplay.com.br
LIVE RENDER
hofplay.com.br

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

85
/ 100
Critical visual risk

Visual red flags detected in the screenshot

The page exhibits high risk due to the presence of unrelated Russian text promoting online casinos at the top of a Portuguese-language professional training site, suggesting the site may be compromised or used for SEO poisoning.

Visual risk85/100

What our vision model saw

4 signals

Suspicious Russian text at the top of the page mentions 'vavada online casino' and 'epicstar online', which is unrelated to the main content.

The main page content is in Portuguese and promotes 'HOFPLAY', a streaming service for facial harmonization.

Significant language mismatch between the Russian SEO-style text and the Portuguese marketing layout.

The presence of hidden or unrelated keywords for online casinos is a common tactic for hijacked sites or SEO spam redirects.

Intelligence

Advanced threat intelligence
Analysis
Moderate scam likelihoodengineMT · Guardiantrust45/100
MT AgentLive web researchVisual inspection
0%
Confidence
The domain is 2.8 years old with a valid SSL certificate and hosts a legitimate-looking Brazilian business offering subscription-based training content. Our antivirus network returned zero detections and the hosting IP shows no abuse history. The visual analysis found Russian text promoting Vavada and Epicstar online casinos at the top of a Portuguese-language medical education page. This language mismatch and hidden casino keywords are classic signs of a compromised site being used for SEO poisoning. The business entities are registered in Brazil with active CNPJ numbers, yet five complaints on Reclame Aqui mention refund and course-date issues. No outright scam reports appear in the evidence package, but the injected casino content raises the risk level for visitors.
Full dossier
Analysis complete

Page Content

The homepage promotes HOF Play, a subscription streaming service offering over 200 hours of video lessons on botulinum toxin, hyaluronic acid fillers, collagen biostimulators, facial anatomy, and complication management aimed at health professionals. The site displays monthly and annual pricing plans, a 7-day money-back guarantee, and a free tier option. Contact details include one email on the domain and a WhatsApp link, but no physical postal address is shown. The body text preview contains Russian-language casino promotion text referencing Vavada and Epicstar that is unrelated to the Portuguese course content.

Infrastructure

The site runs on IP 160.153.0.27 with a clean abuse score and no prior reports. SSL is issued by Google Trust Services and remains valid for 76 days. External resources load from fonts.googleapis.com, forms.gle, pay.kiwify.com.br, Instagram, and WhatsApp. No login forms, countdown timers, or push-notification prompts were detected. The page loads as a standard marketing site without visible malware indicators.

Domain History

The .com.br domain was registered on 2023-09-06 through GoDaddy and is now 2.8 years old. WHOIS privacy protection is disabled. Two related Brazilian companies are listed: HOF PLAY ACADEMY TREINAMENTOS E EDITORA LTDA (CNPJ 56.776.282/0001-78, registered August 2024) and LETS HOF ACADEMY ODONTOLOGIA EDUCACAO E EDITORA LTDA (CNPJ 52.278.864/0001-73, registered September 2023), both in São Paulo.

Web Reputation

No scam reports or mentions on major review platforms were found for hofplay.com.br. Reclame Aqui shows five complaints against the related Let's HOF Academy entity concerning refunds and course scheduling, though the platform rates the company as having insufficient data for a formal reputation score. Instagram and YouTube accounts linked to Dr. Victor Rogerio appear active with promotional content. The domain itself has no traffic ranking and is not indexed in global traffic indexes.

What this means for you

The core offering appears to be a real educational platform operated by registered Brazilian companies, yet the presence of unrelated Russian casino keywords suggests the site has been compromised or manipulated for SEO spam. Visitors should avoid entering payment details until the injected content is removed and the page is verified clean.

Risk Factors
4
  • Russian casino promotion text appears in the page source despite Portuguese medical education content.
  • Five complaints on Reclame Aqui cite refund and course-date problems with the related Let's HOF Academy entity.
  • No physical business address is displayed on the site despite active CNPJ registrations.
  • The domain shows zero global traffic ranking and is not indexed by major search engines.
Positive Signals
4
  • Domain is 2.8 years old with valid SSL from Google Trust Services.
  • Zero detections across our antivirus network and clean hosting IP reputation.
  • Two active Brazilian companies with CNPJ numbers are linked to the domain.
  • Site offers a 7-day money-back guarantee and WhatsApp contact option.
AI Recommendation
Do not enter payment information until the Russian casino text is removed and the site is confirmed clean. Consider contacting the operator via WhatsApp to verify current status before subscribing.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for hofplay.com.br, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration
Active · Brazil
Site traces back to an actively registered business.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
5 complaints
Key findings
7 headline facts from open-web research
  • Domain hofplay.com.br active since ~Sep 2023 (2.8 years old per registration data); homepage promotes online platform with 200+ hours of HOF (Harmonização Orofacial) video content, cases, and subscriptions.
  • Linked to Let's HOF Academy (letshof.com.br) and Instagram @hofplayoficial / @letsacademybr; associated with Dr. Victor Rogerio (UNIFESP-EPM, LinkedIn, YouTube lectures).
  • Business entities: HOF PLAY ACADEMY TREINAMENTOS E EDITORA LTDA (CNPJ 56.776.282/0001-78, active, São Paulo) and LETS HOF ACADEMY ODONTOLOGIA EDUCACAO E EDITORA LTDA (CNPJ 52.278.864/0001-73).
  • Reclame Aqui lists Let's HOF Academy with 'Sem reputação definida' (insufficient complaints for rating); at least 5 specific complaints visible (e.g., refund issues, course date changes, estorno not processed) from 2025-2026.
  • No scam reports, Trustpilot, ScamAdviser, or Reddit mentions found for hofplay.com.br or HOF Play; searches for 'scam', 'golpe', 'fraude', 'reclamação' yield no negative hits.
  • Site offers 7-day money-back guarantee, monthly/annual plans (~R$129-149/mo), free tier, and WhatsApp contact; content focuses on botox, fillers, anatomy for health professionals.
  • Instagram and YouTube presence with promotional reels and lectures; no brand impersonation indicators.
Business registration
Status: active · Brazil

HOF PLAY ACADEMY TREINAMENTOS E EDITORA LTDA, CNPJ 56.776.282/0001-78, registered ~Aug 2024, São Paulo/SP. Related entity LETS HOF ACADEMY ODONTOLOGIA EDUCACAO E EDITORA LTDA, CNPJ 52.278.864/0001-73, registered Sep 2023, São Paulo/SP.

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Our research found no scam reports or fraud mentions for hofplay.com.br across consumer complaint sites and general web sources. The related Let's HOF Academy entity shows five complaints on Reclame Aqui about refund processing and course date changes, though the platform lists the company as having insufficient data for a formal reputation rating. No mentions appear on Reddit, an independent review aggregator, or news outlets. Business registration records confirm two active Brazilian companies tied to the domain.

Domain Timeline

  1. Sep 6, 2023
    Domain registered

    First appeared in WHOIS records — 2.8 years old today.

  2. Jul 9, 2026
    Latest security review — Flagged as suspicious

    This scan re-ran every check; the current findings are detailed above.

hofplay.com.br is an established domain now carrying threat signals. An older domain that starts tripping security checks is a classic pattern for an asset that was sold, repurposed, or compromised — the age alone is not reassurance.

Threat Detection

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious57Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Technical Details

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
Has a contact email on its own domain
Emails on site's domaincontato@hofplay.com.br
Phone numbers11 92135-3390
Postal addressNot listed
Linked social profiles2
Signal Summary
Contact details look reasonable
  • No postal address visible on the page.
  • Contact email on the site's own domain (contato@hofplay.com.br).
  • Phone number listed (11 92135-3390).
  • Links to 2 social profiles.

Domain & Encryption

Domain History
Age3 years old
RegistrarGODADDY
RegisteredSep 6, 2023
ExpiresSep 6, 2028
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
ExpiresSep 23, 2026 (76d)
Self-signedNo
Hosting & Technology
HostingGoDaddy.com, LLC
Server locationUS
Web servercloudflare
Platform / CMSWordPress

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://hofplay.com.br/
  • 2200https://hofplay.com.br/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPGoDaddy.com, LLC
Usage typeContent Delivery Network

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

What to do

Proceed with caution

Our automated review flagged enough risk that you should treat this site as unverified.

  • Treat hofplay.com.br as unverified

    Do not enter credentials or send money until you have independently verified the business.

  • Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  • Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  • Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

Final Verdict

0
Trust / 100
Final Verdict·hofplay.com.br
SUSPICIOUS

The site offers paid online courses on facial harmonization procedures. Russian casino keywords appear in the page source while the rest of the site is in Portuguese, indicating possible compromise or SEO manipulation.

Do not enter payment information until the Russian casino text is removed and the site is confirmed clean. Consider contacting the operator via WhatsApp to verify current status before subscribing.

AV engines
92
Domain age
3 yrs
Flagged
0
Scan another URL
Security review completemalwaretips.com/url-scan

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review marked hofplay.com.br as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
  • hofplay.com.br currently scores 55/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
  • Yes. hofplay.com.br presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 76 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • hofplay.com.br is 2.8 years old, registered on 9/6/2023 through GODADDY. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • No. All 92 antivirus engines in our malware network report hofplay.com.br as clean.
  • No. hofplay.com.br is not currently listed on the major browser blocklist feeds that modern browsers use.
  • hofplay.com.br resolves to an IP operated by GoDaddy.com, LLC in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on July 9, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around hofplay.com.br have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.
Recently scanned

Other Suspicious reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.