While investigating suspect websites, our researchers discovered this fake "Regent of the North Winds ($REGENT)" page. It closely impersonates the official website of Regent (regentsol.io). Upon examination, we determined that it is a phishing scam targeting cryptowallet log-in credentials.
We have analyzed the website (sparkrewards[.]finance) and found that it imitates the original Spark site (spark.fi) to deceive users. The site is fraudulent and uses a malicious tool to drain wallets (steal crypto funds). It should not be trusted or accessed, as interacting with it can result in p
When browsing suspicious sites, our research team discovered this fake "Jito MEV Rewards" scam. It masquerades as Jito Network's official website (jito.network) and promises rewards to eligible users. This scam aims to deceive users into exposing their digital wallets to a crypto drainer. IM
Our team has examined the email and found that it includes a fake message from LinkedIn to trick recipients into opening a deceptive website. The provided site is designed to steal personal information. Falling for this phishing scam can lead to account hijacking and other issues. Thus, this scam
Our researchers discovered the emilebostily[.]com rogue page during a routine investigation. After inspecting this webpage, we learned that it promotes browser notification spam and produces redirects to other (likely unreliable/hazardous) sites. Most users access emilebostily[.]com and analogous
We have determined that points-soniclabs[.]app is a fake version of the Sonic platform (soniclabs.com) created to deceive users. It operates as a cryptocurrency scam that uses a malicious method to drain funds from victims' wallets. The site is unsafe and should be avoided. IMPORTANT NOTE: W
Our team reviewed the website (vwa.allocation[.]pro) and determined that it mimics the original Vanguard site (vwa.to) to trick users. It is a fraudulent site designed to steal cryptocurrency through a malicious tool, and should not be trusted or visited. Falling for this scam can lead to irrecove
We have reviewed daemanon[.]com and concluded that its sole purpose is to trick visitors into consenting to get notifications from it. If permission is given, daemanon[.]com can send fake warnings and other deceptive messages. Moreover, these notifications can expose users to privacy and security
Our analysis shows that Nobody is ransomware based on the Chaos ransomware. We discovered Nobody while analysing samples uploaded to VirusTotal. Once executed on the device, this ransomware encrypts files and appends its extension (four random characters, like ".ckoz") to filenames. Also, Nobody d
During the inspection of hatetoryse[.]com, we determined that the website is deceptive. After being opened, it shows a misleading message designed to trick visitors into enabling its notifications. Once granted permission, hatetoryse[.]com delivers false alerts and similar notifications that can o