Threat Scorecard

Ranking: 3,476
Threat Level: 20 % (Normal)
Infected Computers: 211
First Seen: August 21, 2022
Last Seen: November 16, 2022
OS(es) Affected: Windows

Ylcufr.com is an untrustworthy website that users are unlikely to visit intentionally. After all, the chances of encountering any useful content on the page are minimal. Instead, the site is far more likely to scan the incoming IP addresses/geolocations of its visitors and present them with dubious or clickbait messages. 

Typically, the goal of sites such as Ylcufr.com is to lure users into enabling their push notifications without realizing it. To mask their intentions, these sites utilize various fake scenarios. For example, the page may imply that to access its content, users must first pass a CAPTCHA check. Ylcufr.com also has been observed to show a video window accompanied by a message similar to:

'Press 'Allow' to watch the video'

By following the instructions, users will unknowingly be subscribed to the site's push notifications. Ylcuft.com could then abuse the browser permissions associated with this feature to deliver intrusive and annoying advertisements. Affected users may frequently be shown advertisements promoting additional hoax pages, untrustworthy online betting/gaming platforms, fake giveaways, etc. In addition, upon pressing the displayed 'Allow' button, users may trigger forced redirects leading them to similarly untrustworthy destinations. One confirmed redirect took the infosec researchers to a questionable page at news-xebipi.com


Most Viewed