Deceiving domain - Loginhelper.co

Loginhelper.co is an insecure webpage that users may encounter while browsing the web. It promotes a browser extension My Login Helper, which is a browser hijacker and a potentially unwanted program. Upon infiltration, users will soon notice that their homepage is swapped to search.hmyloginhelper.com or home.hmyloginhelper.com, and the customized search engine brings them to Yahoo, although search results are not organic and filled with sponsored links and ads.

Besides being the leading source for downloading the unwanted app, Loginhelper.co also asks users to enable notifications via the site. This is implied as a mandatory feature for the My Login Helper extension to work, and the "Deny" button on this prompt is deceptively shown in gray - this is a typical social engineering tactic to make visitors subconsciously think that the option cannot be selected in the first place. If these notifications are allowed, users will be presented with deceptive pop-ups that show up directly on their screes, disturbing web browser sessions with ads.

Name Loginhelper.co
Type Browser hijacker
Functionality Prompts users to download a browser extension for Google Chrome that allegedly helps them track their emails easier; uses push notification prompt and asks users to enable pop-ups in order for ads to be displayed directly on their desktops
Detection 4 engines detect the website as malicious on Virus Total (March 2020 results)

Loginhelper.co violations

2CR-015: Loginhelper.co is detected as malicious by four AV providers

Loginhelper.co is detected as malicious by four AV providers

ACR-014: Loginhelper.co prompts users to allow notifications and shows "Deny" button grayed out, implying it is not available

Loginhelper.co prompts users to allow notifications and shows "Deny" button grayed out, implying it is not available