Our analysis of manderming[.]com revealed that it is a misleading website designed to deceive users into enabling notifications. Once granted permission, the site can deliver intrusive and deceptive messages, such as false alerts or promotional offers, that may redirect users to other suspicious o
Our research team found this fake "Yala NFT Giveaway" site while browsing suspicious sites. This webpage operates as a cryptocurrency drainer – by stealing funds from exposed cryptowallets. It must be emphasized that this scam is not associated with the actual Yala DeFi protocol website (yala.org)
During our inspection of hylabick[.]com, we discovered that it is a deceptive web page created to trick visitors into agreeing to receive its notifications. Once this page obtains permission to show notifications, it can bombard users with fake messages (e.g., warnings or offers) designed to promo
After examining this "Shared Document - Business Proposal And Product List" email, we determined that it is spam. This message states that the recipient has been sent a document containing a business proposal. The attachment is a phishing file targeting email account log-in credentials. It must be
We have checked epbenvite[.]com and found that it is designed to lure visitors into accepting its notifications. If allowed, epbenvite[.]com can send misleading notifications containing fake warnings and similar content. These notifications can expose users to online threats. Thus, epbenvite[.]com
Our research indicates that bravixnoro.co[.]in employs misleading tactics to trick users into allowing notifications. Once permission is granted, the site abuses it to send spam messages, often featuring fake alerts and deceptive content. For these reasons, it is strongly recommended to avoid visi
Our analysis shows that it is a fake email presented as a notification regarding a failed verification. It is crafted to trick recipients into opening the included link and entering personal information. Emails of this type are classified as phishing messages. Recipients should recognize such emai
DeadLock is ransomware that encrypts files and appends the victim's ID and its extension (".dlock") to files. For instance, it renames "1.jpg" to "1.jpg.F8C6A8.dlock", "2.png" to "2.png.F8C6A8.dlock", and so forth. It also creates a ransom note (its name contains the victim's ID, e.g., "READ ME.F8
Fophothiogle.co[.]in is a rogue page found by our researchers during a routine inspection of suspect websites. After examining this webpage, we determined that it promotes spam browser notifications and produces redirects to different (likely unreliable and/or dangerous) sites. Most visitors to f
"Your Statement Is Available For Review" is malspam. This malicious spam message alerts the recipient of a mandatory document review. The purpose of this email is to trick victims into installing a malicious ScreenConnect installer onto their devices. It must be emphasized that this mail is not as