While investigating dubious websites, our team discovered the fake "Perpl" page at App-perpl[.]com. It impersonates the legitimate Perpl trading platform (perpl.xyz) and operates as a cryptocurrency drainer. IMPORTANT NOTE: We do not review crypto projects, please do your own research when i
While investigating dubious sites, our researchers discovered proposal-arrow[.]info, a fraudulent page impersonating the legitimate Arrow Finance platform. The site promotes a fake "$ARROW Community Distribution Date Proposal," urging visitors to vote within 24 hours to receive a bonus token alloc
We have examined this email and determined that it is a phishing scam. It poses as an urgent notification from the recipient's email service provider, falsely claiming that action is required to update email software before a set deadline. The email leads to a fake login page designed to steal acc
We have inspected the email and found that it is a phishing message pretending to be an automated notice about a webmail policy violation. It claims the recipient's account will be blocked and pushes them to verify ownership on a fraudulent website. The scam is designed to steal login credentials
We have examined this email and concluded it is a phishing scam. It poses as a notification from a financial institution, claiming that a secure payment portal has been shared for a tender document. The link leads to a fake Microsoft OneDrive page designed to steal login credentials. Recipients sh
Our team inspected vote-tokensworks-net.pages[.]dev and found that it impersonates the legitimate TokenWorks platform (token.works). The page claims to offer token holders an early allocation from a so-called Treasury Pool Funds (TPF) program in exchange for voting. In reality, the site is a crypt
SUCKS 2 SUCK is ransomware discovered by our researchers during a routine inspection of new submissions to the VirusTotal website. Once it infects a system, it encrypts files, appends the .encrypted extension to their filenames, and covers the screen with a full-screen lock message demanding payme
We have examined this email and determined that it is a phishing scam. The message is disguised as an official HR policy update notification and directs recipients to a fake email login page designed to steal their account credentials. This email should be ignored. The email presents itsel
We have examined this email and determined that it is a phishing scam. The message impersonates WeTransfer, a legitimate file-sharing platform, and falsely claims that a purchase order has been sent to the recipient. Its purpose is to steal login credentials, and it should be ignored. The
We have examined this email and determined it is a scam. It impersonates official correspondence from Bittrex Global, falsely claiming that the recipient has an outstanding account balance recoverable through a linked verification system. The website promoted by this email very likely functioned a