During our inspection, we found that nextgensecuritylabs.co[.]in is a deceptive website that uses clickbait (a misleading method) to trick visitors into allowing it to show notifications. If the site gets this permission, it can deliver fake warnings and other messages to promote other dubious pag
Our team has reviewed the site (governance-velo[.]finance) and concluded that it is a scam. It offers visitors a token reward in exchange for voting, but there are no real rewards. Governance-velo[.]finance is a fake site that mimics the Velodrome Finance page (velodrome.finance) to steal cryptocu
We have inspected the website (app-xlayer[.]com) and found that it aims to trick visitors into connecting their crypto wallets by offering rewards. Victims of this scam can lose their cryptocurrency, as the site uses a malicious tool to drain wallets. Overall, app-xlayer[.]com is not a trustworthy
While investigating dubious sites, our researchers discovered the lowpedriliks[.]com rogue page. It is designed to promote browser notification spam and generate redirects to other (likely unreliable/hazardous) websites. Most visitors to lowpedriliks[.]com and similar webpages enter them through
"Orderly ($ORDER) Vote Rewards" is a scam discovered by our researchers while browsing suspicious websites. The goal of this fraudulent page is to trick users into exposing their cryptowallets to a cryptocurrency drainer – a mechanism that steals digital assets. It must be emphasized that this sca
Our research team discovered this fake "Giggle Fund ($GIGGLE) Vote Rewards" while investigating suspicious websites. This fraudulent page imitates the official site of the GIGGLE token (giggletoken.com) and promises rewards to early voters who hold the namesake token. The purpose of this scam is t
Our researchers discovered BeFirst ransomware during a routine inspection of new file submissions to the VirusTotal site. This malicious program is part of the MedusaLocker ransomware family. BeFirst operates by encrypting data in order to demand a ransom for the decryption. After we executed a s
While investigating suspect sites, our researchers discovered the "Hyperliquid ($HYPE) Vote Rewards" scam. This page impersonates the official Hyper Foundation website (hyperfoundation.org) and promises rewards to early voters. The goal is to deceive users into exposing their digital wallets to a
This "ChainOpera AI ($COAI)" airdrop is fake. Our researchers discovered this scam during a routine inspection of suspicious websites. It is presented as the official website of ChainOpera AI (chainopera.ai) and lures users into exposing their cryptowallets to a cryptocurrency drainer. It must be
Our examination of the page (event-onyxs[.]org) has revealed that it is a fake site posing as the original Onyx website (onyx.org). The scammers behind the fraudulent page aim to trick visitors into believing that they can claim rewards, and their intention is to steal cryptocurrency. IMPORT