Gcore

G-CORE LABS S.A.

Related companies

• G-Core Holding S.A.
• G-Core Innovations S.à r.l.

Websites

• https://gcore.com/
• https://gcore.lu/
• https://gcore.cc/

Emails

• sales@gcore.com
• support@gcore.com
• info@gcore.com
• noc@gcore.com

Phones

• +35220880507
• +18884148646

Social Media

• Instagram: @gcore.official
• Twitter: @gcore_official

Gcore Under Scrutiny: A Hosting Company at the Heart of Alleged Russian Cyber Operations

Luxembourg-based hosting provider Gcore (gcore.com, gcore.lu, gcore.cc) is facing increasing scrutiny from cybersecurity observers, journalists, and online communities for its alleged role in facilitating illegal and unethical online activities. While Gcore brands itself as a cutting-edge cloud and edge infrastructure provider, evidence is mounting that its services may be exploited by a network of scam operators, shady gambling sites, and even cybercriminal actors operating in circumvention of international sanctions.

Gcore and Suspected Criminal Infrastructure

One of Gcore’s known IP addresses, 92.38.145.145, has been identified by multiple independent commenters and abuse reporters as hosting:

• Scam casino platforms targeting EU and U.S. users
• Unlicensed betting websites
• Suspected money laundering and illegal financial transfer channels connecting Russia with the West

These claims are supported by a growing number of user reports, DDoS complaints, and abuse tracker blacklists, many of which have flagged Gcore for repeated phishing, spam, and hostile server behavior.

Multiple users across platforms like Trustpilot and cybersecurity forums have raised serious concerns about Gcore’s repeated failure to respond to abuse reports. Below are excerpts from publicly available complaints:

“Biggest source of phishing and spam targeting Brazil. One of the biggest sources of spam and phishing in the world. Every day I receive criminal phishing attacks coming from Gcore servers. I reported multiple times, but the problem keeps coming almost daily, for more than a year.”

“Gcore does not care about criminal activity, and they are happy with the profit they make by providing services to criminals. Stay away from this server—unless you are a criminal.”

Another comment highlights Gcore’s apparent unwillingness to act on spam abuse:

“Gcore breaks their own published rules and policies by not acting upon complaints sent to their abuse addresses. Spammers using their IP ranges (45.10.58.0–45.10.59.255) have operated for months at a time. Other ISPs shut these actors down—Gcore seems to be where they fall back to. We've blacklisted Gcore servers—they've become a menace to the internet.”

These consistent, long-standing allegations reinforce the perception of a pattern of inaction, negligence, or even complicity in criminal operations.

Community Abuse Reports Ignored

Despite repeated abuse complaints sent to:

• sales@gcore.com
• support@gcore.com
• info@gcore.com

Many affected users claim Gcore fails to act, with some even alleging retaliatory behavior in the form of Distributed Denial of Service (DDoS) attacks traced back to Gcore infrastructure. In one reported case, a user who flagged eurojobi.com, a fraudulent job scam site hosted by Gcore, said their website came under attack shortly after their report was submitted.

A user-submitted message to Interpol reads:

“I would like to report suspicious and potentially criminal activities involving a hosting provider operating in Luxembourg, known as G-Core Labs S.A... Our own website came under DDoS attack after reporting a scam job site they hosted.”

This pattern is disturbingly similar to the "DDoS-for-hire" case described in a Europol investigation, where servers were leased to cybercriminals to conduct online attacks and hide behind legitimate-looking infrastructure.

Questionable Hosting Choices

Among the websites reportedly hosted by Gcore:

• eurojobi.com – a fraudulent job recruitment platform impersonating legitimate global brands
• komentish.com – a fake Russian-language review site allegedly used for extortion by charging for the removal of negative reviews
• Various illegal online gambling and money transfer websites used to bypass sanctions mechanisms

Leadership and Russian Connections

Although Gcore presents itself as a European business—headquartered in Luxembourg and publicly led by CEO Andre Reitenbach—several top executives have strong Russian business backgrounds.

• Yury Fedorov, COO – Russian; formerly with Alawar Media (RU) and JobToday
• Dmitry Samoshkin, CPO – Russian
• Seva Vayner, Product Director, Edge & AI – Russian
• Kira Kurepina, PR Manager – Russian
• Vasil Mikhalenya, Director of Engineering – Russian
• Dmitriy Gusakovskiy, Head of Infrastructure – Russian
• Galina Ignatenko, Finance Manager – Russian
• Pavel Solovev, VP, Data & Security – Russian

This list has led some observers to question whether Gcore may be vulnerable to influence from actors aligned with Russian state or criminal interests, especially amid rising international tensions and regulatory scrutiny of Russian digital assets in Europe.

A Call for Oversight

The allegations surrounding Gcore demand closer attention from European regulators, cybercrime investigators, and national data protection authorities. With possible connections to DDoS infrastructure, fraudulent content hosting, and illicit finance, Gcore could represent a critical blind spot in Europe’s cyber defense posture.

Until clear action is taken, many recommend avoiding engagement with Gcore as a service provider — especially for enterprises handling sensitive data or regulated financial operations.