Our researchers discovered theamovies[.]com during a routine investigation of suspect websites. This rogue page endorses spam browser notifications and redirects users to different (likely dubious/malicious) sites. Most visitors to webpages like theamovie[.]com access them through redirects gener
During our examination of satincess[.]com, we found that it is a deceptive website. The purpose of satincess[.]com is to lure visitors into accepting its notifications. Also, satincess[.] may lead users to other dubious sites. Thus, users should avoid visiting satincess[.]com and not agree to rece
Thelivenet[.]net is a rogue page discovered by our research team during a routine inspection of suspicious websites. After analyzing this webpage, we determined that it promotes browser notification spam and redirects users to other (likely unreliable/dangerous) sites. Users mainly enter pages lik
We have inspected this email and discovered that it is a fraudulent email disguised as a notification regarding an invoice for Webroot Security Services. Typically, such scam emails are used to steal money and (or) personal information from unsuspecting recipients. Emails of this type should be ig
Our research team found ProtocolView while reviewing file submissions to the VirusTotal platform. Upon inspection, we determined that this app is advertising-supported software (adware). ProtocolView is part of the AdLoad malware group. Adware is designed to generate revenue for its deve
While inspecting a Torrenting site that employs rogue advertising networks, our researchers were redirected to a deceptive page promoting an installer containing the JoisApp PUA (Potentially Unwanted Application). These apps typically possess undesirable and possibly harmful functionalities. They
Search-browser.com is the address of a fake search engine, which cannot provide search results and produces rogue redirects. Typically, these supposed search engines collect visitor data. Sites like search-browser.com are promoted (via redirects) by browser hijackers. Browser-hijacking sof
Trinity is the name of a ransomware-type program. It operates by encrypting files and demanding payment for the decryption. After we executed a sample of Trinity on our testing machine, it encrypted files and altered their names. Original filenames were appended with a ".trinitylock" extension, e
We found that toppholasnow[.]com is an untrustworthy website that uses clickbait, a misleading tactic, to lure visitors into permitting it to send notifications. There are plenty of web pages like toppholasnow[.]com. Another common trait is that users do not open them on purpose. Such pages should
After reading the "AT&T" email, we determined that it is spam promoting a refund scam. It is presented as a confirmation of a service transfer to a different provider. This mail lures recipients into communicating with scammers by claiming that the impending charge for the transfer can be can