Threat Scorecard

Ranking: 4,379
Threat Level: 20 % (Normal)
Infected Computers: 3,168
First Seen: January 25, 2019
Last Seen: September 24, 2023
OS(es) Affected: Windows

The page is not designed to benefit its visitors in any way. On the contrary, the site utilizes various clickbait and deceptive techniques to trick users into subscribing to its push notification, a particularly popular scam that has been propagated by countless other websites.

Typically, when landing on such a page, almost never by their own decision, users will be presented with misleading messages that try to convince them to click the displayed 'Allow' button. The particular scam page may imply that clicking the button is part of a CAPTCHA check, that it will allow a video to play, or allow users to download an unspecified file. has been observed to employ one of these popular methods. It shows a progress bar that is stuck for some reason. Right below it is the message:

Please click the Allow button to continue

Users who follow the instructions will unknowingly give broad browser permissions to the page, which it will promptly start misusing to run an intrusive ad campaign. Advertisements generated by such dubious sources usually contain offers for shady software products, PUPs (Potentially Unwanted Programs), adware, browser hijackers, additional scam websites, adult-oriented pages, phishing schemes, etc.

Another possibility, one that has been confirmed by infosec researchers, is for to deliver notification to the user's system, urging them to 'activate security protection' or 'turn on antivirus.' These notifications could be part of a scheme for collecting illegal commissions from the promotion of legitimate security and other software products.

URLs may call the following URLs:


Most Viewed