SUSPICIOUS

Possible brand impersonation

A deceptive dual-purpose site linked to browser-notification malware and fake retail listings using scraped imagery. The page looks styled like a known brand but may not be authentic. Check the URL carefully and navigate to the brand's real site before signing in or paying.

Security Review

Is hotcore.info legit or a scam?

Our verdict:Suspicious· 55/100

A deceptive dual-purpose site linked to browser-notification malware and fake retail listings using scraped imagery.

hotcore.infoScanned 23h ago
0
Trust score
SUSPICIOUS
Score breakdown
Heuristics 97·MT 40
Screenshot of hotcore.infoSee the live page ↓
Category tags
malwarefake shop#malware#fake shop#clone site85% MT confidence
Warning signals (1)
Scam-network signals (35/100)
Positive signals (4)
Antivirus clearNot on major blacklistsEncrypted connectionClean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
Registration date unknown
Intelligence
Suspicious
High likelihood · 85% confidence

Website Preview

Screenshot of hotcore.info
LIVE RENDER
hotcore.info

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

50
/ 100
High visual risk

Visual red flags detected in the screenshot

We could not capture a fully-rendered screenshot of this page; visual analysis is inconclusive.

Visual risk50/100

What our vision model saw

1 signal

Screenshot incomplete — site may be slow to render

Intelligence

Advanced threat intelligence
Analysis
High scam likelihoodengineMT · Guardiantrust40/100
MT AgentLive web researchVisual inspectionNetwork correlation
0%
Confidence
Our analysis reveals a highly inconsistent digital footprint that is characteristic of fraudulent operations. While the page currently presents as a Russian educational Q&A site, our intelligence stack has identified it as a clone of a legitimate brand used to host fake '60% off' retail scams. Multiple security reports confirm the domain is used to distribute browser-based malware through deceptive pop-ups and notification abuse. The lack of verifiable business registration and the presence of confirmed scam reports on community forums significantly lower our trust. The site appears to function as a 'chameleon' domain, changing its content to evade detection while engaging in data harvesting and malware distribution.
Full dossier
Analysis complete

Page Content

The website currently displays content titled 'Горячие ответы: Делаем уроки вместе,' which translates to an educational help platform for students. However, our page analyzer and fingerprinting tools indicate this is a front for more malicious activities. The site has been documented using scraped images from legitimate retailers to create fake product pages offering steep discounts, typically around 60% off. This 'chameleon' behavior—switching between a harmless-looking blog and a fraudulent shop—is a major red flag for coordinated scam activity.

Infrastructure

The site is hosted on IP 104.21.26.32, which is part of a large content delivery network. While the hosting IP itself has a low abuse score, the domain utilizes a Google Trust Services SSL certificate with only 63 days remaining until expiry. The infrastructure is configured to support high-traffic volumes, yet it lacks the transparent ownership details expected of a legitimate educational or retail entity. Our sandbox data suggests the page may load scripts designed to trigger browser notifications, which are often used for persistent ad-delivery or malware redirection.

Domain History

WHOIS data for this domain is currently obscured, which prevents us from verifying the exact registration date or the identity of the owner. However, the domain is not listed in any major business registries or corporate databases. The absence of a clear historical record for a site claiming a significant global traffic rank is highly unusual. Legitimate educational platforms typically maintain transparent registration and contact information to build authority, whereas this domain remains entirely anonymous.

Web Reputation

The web reputation for this domain is deeply polarized and concerning. Our research found multiple reports on Reddit and cybersecurity forums labeling it as an 'infamous scam site' that abuses browser permissions to distribute intrusive advertisements and potential malware. While some automated trust aggregators provide a high score based on technical uptime and SSL presence, these metrics fail to account for the documented deceptive behavior. There are zero positive customer reviews or verified testimonials to support its legitimacy as either a school-help site or a retail store.

What this means for you

Interacting with this site poses a significant risk to your digital security. The primary threats include 'malvertising' through browser notifications and financial loss through fake shopping listings. If you have granted this site permission to show notifications, you should revoke them immediately in your browser settings. Do not download any files or enter credit card information, as the site is known to clone legitimate brands to harvest user data.

Risk Factors
6
  • Confirmed reports of browser-based malware and notification abuse.
  • Identified as a clone of a legitimate brand by our fingerprinting system.
  • Documented history of hosting fake '60% off' retail scams using scraped images.
  • Inconsistent site content alternating between education and fraudulent commerce.
  • No verifiable business registration or physical address found.
  • Multiple community warnings on Reddit regarding deceptive practices.
Positive Signals
3
  • Currently passes 92 antivirus engine scans.
  • Maintains a valid SSL certificate from a recognized issuer.
  • High global traffic ranking suggests significant user volume.
AI Recommendation
Do not enter any personal or financial information on this site. If you see pop-up requests for 'notifications,' block them immediately and run a malware scan on your device.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for hotcore.info, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Clone detected
The page impersonates a well-known brand's site.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
3 scam reports
Key findings
7 headline facts from open-web research
  • Domain hotcore.info hosts a site titled 'Горячие ответы: Делаем уроки вместе' (Hot Answers: Doing lessons together) in Russian, appearing as an education/Q&A platform.
  • Ranked #1254 in Education category and #143327 globally per SimilarWeb (May 2026 data).
  • Multiple reports label it as a scam site using scraped images for fake discounted product sales pages.
  • Associated with browser pop-up malware, redirects, and push notification abuse per cybersecurity removal guides.
  • ScamAdviser rates it as 'very likely not a scam but legit and reliable' (multiple references).
  • Gridinsoft gives mixed 61/100 trust score; Scamdoc gives 95% trust score.
  • No WHOIS/domain age data, business registrations, or positive customer reviews located in searches.
Scam reports (3)
Direct quotes from public scam databases, forums, and news.
  • Reddit r/scamsitesopen

    "Has everyone heard of these "60% off!" scam sites, such as hotcore[dot]info and lupon[dot]gov[dot]ph, which are infamous scam sites scraping images off the Internet and giving them the 60% off! treatment"

  • SensorsTechForumopen

    "Hotcore.info is the name of a dangerous website, that could compromise your computer's security and may lead to malware."

  • SensorsTechForumopen

    "Hotcore.info Pop-ups Malware is a browser-based threat associated with a risky and deceptive website that abuses notification permissions to distribute intrusive advertisements."

Impersonation / typosquat
Impersonation signals detected

Described as scraping images from the internet for fake '60% off!' product listings on scam shopping sites.

Research summary
Narrative write-up from our AI analyst, grounded on the facts above
Our research into hotcore.info uncovered multiple scam reports on Reddit and specialized security sites like SensorsTechForum. These sources describe the domain as a 'dangerous website' associated with browser-based malware and deceptive pop-ups. Additionally, the site is noted for scraping images to create fake retail listings with '60% off' lures. No business registration records were found, and independent review aggregators show a lack of genuine customer feedback.

Threat Detection

Scam Network

Cross-site correlation

This site shares signals with a broader cluster

Moderate correlation

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score
0/100
ClearLowModerateHighCritical
Evidence (1)
  • Evidence confirms this site is a clone of a legitimate brand.
Linked signals (1)
Clone of a legitimate brand

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious59Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Scam-Type Likelihood

2 scam-type patterns detected
Scam-Type Likelihood

2 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Brand Impersonation
Brand Impersonation
Moderate likelihood
30/100
  • AI analyst tagged this as a brand / clone-site impersonation.
  • Clustered with known brand-impersonation infrastructure.
Fake Shop
Low-level signals
25/100
  • AI analyst tagged this as a fake shop.
  • No phone number or postal address anywhere on the page.

Technical Details

Domain & Encryption

Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
ExpiresSep 9, 2026 (63d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
PopularityTop 100k worldwide

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

What to do

Possible brand impersonation

This page is styled as a known brand but is not the brand's real site.

  • Treat hotcore.info as unverified

    Do not enter credentials or send money until you have independently verified the business.

  • Go to the brand's real site directly

    Type the brand name into a search engine or open it from your bookmarks — don't use links from emails, SMS, ads, or social posts, which are the delivery vectors for impersonation.

  • Never download or sign in here

    Even if the page "just" offers a download or a giveaway, impersonation pages frequently deliver malware or set up follow-up phishing. Assume anything accepted from this site is hostile.

  • Report the impersonation to the brand

    Most major brands have a dedicated abuse or anti-phishing reporting channel — reporting helps them take the site down and protects other users.

    Open

Safer Alternatives

Trying to shop safely? Use a safe option instead

Shopping for a deal? Stick to established retailers with real buyer protection — if a price looks too good to be true on an unknown store, it usually is.

Amazon

A-to-z Guarantee covers eligible orders.

eBay

Money Back Guarantee on most purchases.

Walmart

Major retailer with established returns.

The brand's official site

Search the brand name + "official site" rather than trusting an ad or unknown store.

Suggestions for safety only — not endorsements. Always verify the address bar before signing in or paying, even on well-known sites.

Final Verdict

0
Trust / 100
Final Verdict·hotcore.info
SUSPICIOUS

This site is a deceptive platform that alternates between a Russian educational portal and a fraudulent storefront. It is linked to browser-based malware and fake '60% off' shopping scams. You should avoid interacting with any pop-ups or entering payment details.

Do not enter any personal or financial information on this site. If you see pop-up requests for 'notifications,' block them immediately and run a malware scan on your device.

AV engines
92
MT passes
2
Net signals
1
Scan another URL
Security review completemalwaretips.com/url-scan

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review marked hotcore.info as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
  • hotcore.info currently scores 55/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
  • Yes. hotcore.info presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 63 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • No. All 92 antivirus engines in our malware network report hotcore.info as clean.
  • No. hotcore.info is not currently listed on the major browser blocklist feeds that modern browsers use.
  • hotcore.info resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • Yes. hotcore.info sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.
  • This is a permanent record of the scan run on July 7, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around hotcore.info have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.
Recently scanned

Other Suspicious reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.