We examined this email and determined it is a scam. The message poses as a business proposal from a military general in the Democratic Republic of Congo who claims to need help facilitating a mineral trade deal in South Africa. Scammers behind it seek to build trust before eventually extracting mo
We have examined this email and concluded that it is a phishing scam. The message is disguised as an automated alert from a web hosting provider, falsely claiming that the recipient's domain has misconfigured MX records and has been cut off from Webmail. It is designed to trick domain owners into
While investigating dubious websites, our researchers came across askvenicerai[.]com, a page promoting a fake $VVV token airdrop. It closely imitates the visual style of the legitimate Venice AI platform (venice.ai) and is designed to trick visitors into connecting their cryptocurrency wallets, ac
While investigating dubious websites, our team discovered the fake "Perpl" page at App-perpl[.]com. It impersonates the legitimate Perpl trading platform (perpl.xyz) and operates as a cryptocurrency drainer. IMPORTANT NOTE: We do not review crypto projects, please do your own research when i
While investigating dubious sites, our researchers discovered proposal-arrow[.]info, a fraudulent page impersonating the legitimate Arrow Finance platform. The site promotes a fake "$ARROW Community Distribution Date Proposal," urging visitors to vote within 24 hours to receive a bonus token alloc
We have examined this email and determined that it is a phishing scam. It poses as an urgent notification from the recipient's email service provider, falsely claiming that action is required to update email software before a set deadline. The email leads to a fake login page designed to steal acc
We have inspected the email and found that it is a phishing message pretending to be an automated notice about a webmail policy violation. It claims the recipient's account will be blocked and pushes them to verify ownership on a fraudulent website. The scam is designed to steal login credentials
We have examined this email and concluded it is a phishing scam. It poses as a notification from a financial institution, claiming that a secure payment portal has been shared for a tender document. The link leads to a fake Microsoft OneDrive page designed to steal login credentials. Recipients sh
Our team inspected vote-tokensworks-net.pages[.]dev and found that it impersonates the legitimate TokenWorks platform (token.works). The page claims to offer token holders an early allocation from a so-called Treasury Pool Funds (TPF) program in exchange for voting. In reality, the site is a crypt
SUCKS 2 SUCK is ransomware discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. Once it infects a system, it encrypts files, appends the .encrypted extension to their filenames, and covers the screen with a full-screen lock message demanding payme