Our investigation of guartian.co[.]in reveals that it relies on clickbait to trick visitors into enabling notifications. Once permission is granted, the site can deliver fake alerts and misleading messages directly to devices. Interacting with guartian.co[.]in can expose users to scams and other t
Our analysis of greensmallbutterfly[.]com has shown that it is a deceptive website. It tries to lure visitors into enabling push notifications, which can later be exploited to send fake alerts and other misleading messages. These notifications can direct users to other harmful websites. For these
Our inspection of glsadz[.]com has determined that it is a deceptive website. It attempts to trick visitors into enabling push notifications, which can then be abused to deliver fake alerts and misleading messages. These notifications often lead users to other, potentially malicious, websites. For
Our researchers discovered the gougenoticei[.]com rogue page during a routine inspection of untrustworthy websites. Upon investigation, we learned that this webpage promotes browser notification spam and redirects visitors to different (likely dubious/dangerous) sites. Most users enter pages like
Goodssurveysuccess[.]top is a rogue page that promotes deceptive content and browser notification spam. It can also redirect users to other (likely unreliable/hazardous) sites. Most visitors to goodssurveysuccess[.]top and similar webpages access them via redirects produced by websites that utiliz
After reading this "Promotion Of Powerball Lottery Organization 2025" email, we determined that it is spam. The message claims that the recipient has won millions in a lottery. This phishing campaign targets recipients' personally identifiable details, and may even attempt to trick them into sendi
While browsing dubious websites, our researchers discovered this fake "Trezor Security Update" page. It impersonates the official website of the Trezor wallet (trezor.io) and claims that users must undertake a critical update. This is a phishing scam that targets cryptocurrency wallet log-in crede
This fake "Gasspas (GASS)" page (gasspas-vip.web[.]app; possibly other domains) is an almost perfect visual copy of the official Gasspas website (gasspas.vip). This imitator webpage promotes a cryptocurrency drainer, which is designed to siphon funds from exposed digital wallets. It must be stress
We have inspected the page (walletsuppport[.]com) and discovered that it is a fake crypto analytics platform. The scammers behind it offer crypto vouchers to lure users into connecting their wallets. Their goal is to steal cryptocurrency from unsuspecting individuals. Thus, this site should be avo
Our researchers found the 707 ransomware while investigating new submissions to the VirusTotal website. Malware of this kind encrypts data and demands payment for the decryption. On our test machine, 707 encrypted files and appended their names with a ".707" extension. For example, a file origina