threat-intel
Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams
Info
Summary
Help TDS, a long-running Traffic Distribution System (TDS) linked to the Russian-language affiliate program Hotejka (a rebrand of ROI777), has been used to deliver tech support scams to over 20,000 Cloudflare Pages domains since April 2026. The system has been active since at least 2017 and is used by a network of affiliates to monetize traffic.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data