Lightfoot.top Pushes Intrusive Ads By Abusing Push Notifications

During our research into misleading websites, our team came across the rogue webpage called lightfoot.top. This page promotes browser notification spam and has the ability to redirect visitors to other unreliable or harmful websites.

Usually, users are directed to pages like lightfoot.top through redirects that occur due to the use of rogue advertising networks by other websites. It is important to note that the behavior of rogue webpages can vary based on the geolocation or IP address of the visitor.

Upon investigation, we discovered that lightfoot.top has two versions with different appearances. One of the versions uses a fake CAPTCHA verification to trick visitors into enabling the browser notification delivery, displaying the message "Press 'Allow to verify that you are not a robot'." The other version falsely instructs visitors to "Please tap the Allow button to continue," implying that clicking "Allow" is necessary to access the website.

If users are deceived by either version and click "Allow," lightfoot.top will be permitted to deliver browser notifications. These notifications are used to run intrusive advertisement campaigns that promote online scams, unreliable or harmful software, and even malware. Therefore, it is important to avoid interacting with such pages to prevent system infections and privacy issues.

How Can You Tell a Real Anti-Bot Check from a Fake One?

Distinguishing between a real anti-bot check and a fake one can be tricky, but there are a few ways to identify the difference.

Firstly, a real anti-bot check is typically more complex and challenging than a fake one. For example, it may involve solving a series of puzzles or identifying specific objects within an image.

Secondly, a real anti-bot check is usually conducted by a legitimate website or service that has a need to protect against bots. On the other hand, fake anti-bot checks are often associated with untrustworthy or malicious websites.

Thirdly, a real anti-bot check is usually optional and presented in a clear and upfront manner. In contrast, fake anti-bot checks may be presented in a deceptive or misleading way, such as using language that implies the check is mandatory.

Lastly, a real anti-bot check typically only requires you to prove that you are human, whereas fake ones may ask for additional information, such as your email address or phone number.

Overall, if you are unsure whether an anti-bot check is real or fake, it is best to err on the side of caution and avoid interacting with the website or service.