While browsing suspicious sites, our researchers discovered surilour.co[.]in. Upon examination, we learned that it is yet another rogue page that uses a fake CAPTCHA test to trick visitors into permitting its browser notifications. This webpage can also redirect users to different (likely untrustw
Our review of subingracel.co[.]in has shown that it can display annoying and misleading notifications. However, it cannot do so without permission, which it attempts to obtain through clickbait. Users should avoid visiting subingracel.co[.]in and never allow web pages of this kind to show notifica
Our analysis shows that THRSX is ransomware designed to encrypt files and change their filenames by appending its extension (".THRSX"). For instance, it renames "1.jpg" to "1.jpg.THRSX" and "2.png" to "2.png.THRSX". Also, this ransomware creates a ransom note ("RECOVER_INSTRUCTIONS.html"). Our dis
While examining honitigele[.]com, we found that the site aims to obtain permission to show notifications. It uses clickbait to get this permission. After gaining it, honitigele[.]com can deliver misleading messages designed to trick users into opening other shady pages. Thus, honitigele[.]com shou
Our analysis of besientadmid[.]com indicates that it is an unreliable website designed to send misleading notifications. While it cannot push notifications without user consent, it uses deceptive content to trick users into agreeing to get them. Once permission is given, the site can flood users w
We inspected Wild Nature and found that it is a browser extension that has the traits of a browser hijacker. Once added to a web browser, this extension changes some of its settings to searching.wildnaturetab.com, which is a fake search engine. It is advisable to avoid using browser hijackers (and
Our researchers discovered the slocatic.co[.]in rogue page while investigating questionable websites. After examining this webpage, we learned that it endorses browser notification spam and redirects users to other (likely untrustworthy/dangerous) sites. Most visitors access slocatic.co[.]in and s
Our research team found the pressers.co[.]in rogue page while inspecting suspicious websites. This webpage is designed to promote browser notification spam and cause redirects to different (likely unreliable/hazardous) sites. Pressers.co[.]in and analogous pages are primarily accessed through redi
Sedfopso.co[.]in is a rogue page discovered by our researchers during a routine inspection of dubious websites. After examining this webpage, we learned that it endorses browser notification spam and generates redirects to different (likely unreliable/dangerous) sites. The majority of visitors to
Our researchers discovered panaptor.co[.]in while browsing suspicious sites. This rogue page endorses browser notification spam and generates redirects to other (likely untrustworthy/hazardous) websites. Panaptor.co[.]in and similar webpages are most commonly accessed via redirects caused by websi