This page was first detected by ConcealBrowse on April 10th. Security vendors began reporting this site as malicious in December of 2022, with five security vendors flagging this page to date. ConcealBrowse intervened with a 14% risk assessment after detecting suspicious behavior.

Although this website represents a legitimate service, it has been previously shown to have vulnerabilities that allow for the injection of malicious scripts. These scripts can steal data that has been entered into the site, including payment information and account credentials. Sharing passwords across sites can make this form of attack more devasting, as malicious actors can continue to infiltrate other accounts belonging to the victim.

Conceal Recommends: ConcealBrowse’s intervention will prevent users from entering data into the forms on the website, therefore preventing the scripts from stealing information.

This page was first detected by ConcealBrowse on April 1st, with the first security vendors seeing it in late March. It was originally detected by 4 vendors, but now this URL is seen by 15 security vendors as malicious. ConcealBrowse intervened with a 40% risk assessment, citing suspicious behavior.

Online banking scams take the appearance of legitimate financial institutions for the purpose of stealing money or financial information from victims. This site also has evidence of being involved in a cryptocurrency scam, where victims are encouraged to invest money in a cryptocurrency for false promises about returns on investment. Although this website is not attempting to directly steal credentials, ConcealBrowse’s intervention allows users to take a second look at the legitimacy of the page they were going to visit.

Conceal Recommends: This domain should be blocked to protect users from potential fraud. 

This URL was first detected by ConcealBrowse on March 18th, with five security vendors initially reporting it for phishing on March 13th. Currently, there are seven vendors flagging this URL as phishing and malicious. ConcealBrowse intervened with a 30% risk assessment, citing proximity to other malicious pages.

This page is part of a common document sharing phishing campaign. These scams are usually designed to target specific companies by sending emails to their targeted victims that appear to be from known organizations. When a user clicks on the link on the webpage, they will be redirected to the malicious site that will attempt to steal their credentials. ConcealBrowse’s intervention keeps the site in isolation even when redirects occur, keeping users from being able to enter their credentials.

Conceal Recommends: This URL should be blocked. ConcealBrowse’s use of isolation technology helps prevent users for falling for credential theft from suspicious sites. 

This URL was detected by ConcealBrowse on March 4th and was first reported by seven security vendors on February 18th. Today, it is detected by nine security vendors for malicious behavior. ConcealBrowse successfully intervened with a 14% risk assessment, citing suspicious behavior.

This page offers a free browser extension that, once installed, can convert different types of documents into PDFs. Unfortunately, this site has been flagged as untrustworthy and containing potential malware via the extension. Illegitimate browser extensions are a significant cause of concern for the privacy of users, due to their ability to manipulate the content of web pages and read data such as browsing history. Malicious extensions can also cause excessive pop-ups and redirecting to unwanted websites.

Conceal Recommendation: ConcealBrowse’s intervention will prevent downloads of any software, but companies should consider creating an allow list for legitimate browser extensions to prevent users from installing anything potentially malicious. 

This URL was detected by ConcealBrowse on February 13th. It was first detected by one security vendor on January 9th, and there are currently four security vendors reporting this page for malicious activity. ConcealBrowse intervened with a 32% risk assessment due to malware and proximity to malicious IP addresses.

The IP address connected to this page was recently flagged for hosting a form of ransomware through a malicious popup. Users would click on the popup, and the executable file would download to their computer. Ransomware can be devastating, especially in cases where computers are connected to each other on a network and the malicious software can spread. Although the page is now down, ConcealBrowse still intervened to protect users in the future if the site becomes active again.

Conceal Recommendation: Rely on active defense solutions such as ConcealBrowse. When ConcealBrowse intervenes on a page, all download attempts are blocked to protect users from malware such as this. Live analysis of the site allows for early intervention and prevents malicious downloads.