While investigating suspect websites, our researchers discovered this fake "Plasma" airdrop. The scam impersonates the Plasma blockchain platform. This fraudulent page operates as a cryptocurrency drainer – by siphoning digital assets from exposed cryptowallets. IMPORTANT NOTE: We do not rev
Our investigation revealed that dipinigly[.]com is a deceptive site that employs clickbait to trick users into enabling notifications. Once this permission is granted, the site can send fake alerts and similar messages to direct visitors to other suspicious websites. For these reasons, dipinigly[.
During our inspection, we found that nextgensecuritylabs.co[.]in is a deceptive website that uses clickbait (a misleading method) to trick visitors into allowing it to show notifications. If the site gets this permission, it can deliver fake warnings and other messages to promote other dubious pag
Our team has reviewed the site (governance-velo[.]finance) and concluded that it is a scam. It offers visitors a token reward in exchange for voting, but there are no real rewards. Governance-velo[.]finance is a fake site that mimics the Velodrome Finance page (velodrome.finance) to steal cryptocu
We have inspected the website (app-xlayer[.]com) and found that it aims to trick visitors into connecting their crypto wallets by offering rewards. Victims of this scam can lose their cryptocurrency, as the site uses a malicious tool to drain wallets. Overall, app-xlayer[.]com is not a trustworthy
While investigating dubious sites, our researchers discovered the lowpedriliks[.]com rogue page. It is designed to promote browser notification spam and generate redirects to other (likely unreliable/hazardous) websites. Most visitors to lowpedriliks[.]com and similar webpages enter them through
"Orderly ($ORDER) Vote Rewards" is a scam discovered by our researchers while browsing suspicious websites. The goal of this fraudulent page is to trick users into exposing their cryptowallets to a cryptocurrency drainer – a mechanism that steals digital assets. It must be emphasized that this sca
Our research team discovered this fake "Giggle Fund ($GIGGLE) Vote Rewards" while investigating suspicious websites. This fraudulent page imitates the official site of the GIGGLE token (giggletoken.com) and promises rewards to early voters who hold the namesake token. The purpose of this scam is t
Our researchers discovered BeFirst ransomware during a routine inspection of new file submissions to the VirusTotal site. This malicious program is part of the MedusaLocker ransomware family. BeFirst operates by encrypting data in order to demand a ransom for the decryption. After we executed a s
While investigating suspect sites, our researchers discovered the "Hyperliquid ($HYPE) Vote Rewards" scam. This page impersonates the official Hyper Foundation website (hyperfoundation.org) and promises rewards to early voters. The goal is to deceive users into exposing their digital wallets to a