Enasnews.com Shows Fake Anti-Bot Check
Our researchers came across enasnews.com, a deceitful website, during a routine examination of untrustworthy online platforms. Upon investigation, we found that it engages in pushing browser notification spam and redirecting users to other potentially dubious or malicious websites.
Individuals visiting enasnews.com and similar sites typically reach them through redirects generated by webpages affiliated with rogue advertising networks.
Upon accessing enasnews.com, we encountered an image featuring five cartoonish robots, accompanied by a prompt instructing users to click "Allow" if they are not robots.
It's important to note that the content displayed on rogue pages, including enasnews.com, may vary based on the visitor's IP address, influenced by geolocation.
The CAPTCHA verification on enasnews.com is fraudulent; its intention is to deceive users into granting permission for the site to send browser notifications. Should users allow this, they will be bombarded with advertisements promoting online scams, unreliable software, and potentially harmful malware.
How Can Misleading Sites Abuse Push Notifications?
Misleading sites can abuse push notifications by coercing users into subscribing to them under false pretenses. Here's how they typically exploit push notifications:
Deceptive Tactics: Misleading sites often employ deceptive tactics to trick visitors into subscribing to push notifications. They may use misleading or enticing messages, such as fake alerts, promises of exclusive content, or misleading offers, to persuade users to click on the "Allow" button.
Fake CAPTCHA Verification: Some misleading sites display fake CAPTCHA verification prompts, claiming that users need to prove they are not robots by clicking "Allow" on the push notification prompt. However, clicking "Allow" subscribes users to push notifications rather than completing a CAPTCHA verification process.
Disguised Opt-In Requests: Push notification opt-in requests may be disguised or hidden within the site's content, making it difficult for users to discern that they are subscribing to notifications. This tactic aims to capitalize on users' inadvertent clicks or lack of awareness about push notification subscription mechanisms.
How Can You Spot a Fake Anti-Bot Check?
Spotting a fake anti-bot check requires careful attention to certain indicators. Here are some ways to identify if an anti-bot check is fake:
Context: Consider the context in which the anti-bot check appears. If it appears unexpectedly or seems out of place on a website, particularly if you haven't initiated any action that would require a verification process, it could be a red flag.
Design and Layout: Pay attention to the design and layout of the anti-bot check. Legitimate CAPTCHA or anti-bot verification systems typically have a consistent and recognizable design, often with well-known branding such as Google's reCAPTCHA. If the design looks unprofessional, inconsistent, or significantly different from what you're accustomed to, it may be fake.
Language and Grammar: Check the language and grammar used in the anti-bot check prompt. Legitimate verification systems typically use clear and professional language without spelling or grammar errors. If you notice poor language or grammar, it could indicate a fake anti-bot check.
Unusual Requests: Be cautious of anti-bot checks that require unusual actions or requests, such as clicking on specific areas of the screen, downloading additional software, or providing personal information. Legitimate CAPTCHA systems usually only require users to complete simple tasks like selecting images or typing characters.
Behavior after Verification: Pay attention to what happens after completing the anti-bot check. If the website behaves unexpectedly, such as redirecting to unrelated pages, displaying intrusive ads, or asking for further verification, it could be a sign of malicious activity.
