Fyngood.com Uses Fake Captcha to Push Intrusive Ads

While conducting a routine investigation into suspicious websites, our research team recently came across the rogue webpage fyngood.com. Its primary purpose is to inundate users with browser notification spam and redirect them to potentially dubious or malicious sites.

Typically, sites like fyngood.com are accessed through redirects generated by websites utilizing illegitimate advertising networks.

It is important to note that the content promoted on rogue sites may vary depending on the geolocation of the visitor's IP address.

Upon visiting the fyngood.com page, we encountered an image of a pink robot alongside text instructing us to click "Allow" if we were not a robot. This deceptive CAPTCHA test aims to deceive visitors into granting fyngood.com permission to deliver browser notifications.

Once we granted consent for this content delivery, we were redirected to a webpage commonly used to endorse adware, browser hijackers, and other untrustworthy software.

Rogue websites employ their notifications to conduct intrusive advertising campaigns. These ads promote various scams, unreliable or harmful software, and potential malware. Consequently, through sites like fyngood.com, users can be exposed to system infections, severe privacy concerns, financial losses, and even identity theft.

How Can You Tell an Anti-Bot Check is Fake?

Determining whether an anti-bot check is fake or legitimate can be challenging, but there are certain indicators that can help you identify suspicious or fraudulent checks. Here are some signs that an anti-bot check might be fake:

• Unusual or unconventional design: Fake anti-bot checks often have poorly designed or unconventional layouts that differ from widely recognized designs used by legitimate platforms.
• Strange or unclear instructions: If the instructions provided in the anti-bot check are confusing, vague, or poorly written, it could be a red flag. Legitimate checks usually have clear and concise instructions.
• Excessive difficulty: Fake anti-bot checks may intentionally make the task extremely difficult or virtually unsolvable. Legitimate checks are typically designed to be challenging but still achievable for human users.
• Poor visual quality: Fake checks might exhibit low-resolution images, distorted graphics, or inconsistent colors. Legitimate anti-bot checks usually have high-quality graphics and consistent visual elements.
• Suspicious domain or URL: Check the domain or URL of the page hosting the anti-bot check. Fake checks often use domains that mimic popular websites or contain unusual combinations of letters or numbers.
• Absence of branding or trademarks: Legitimate anti-bot checks often include recognizable logos, trademarks, or branding elements. If these are missing or appear altered, it could indicate a fake check.