Your next job offer
might not be real.
Last year, job scams cost people $501 million — up 456% in four years. AI has erased the old warning signs: the typos, the broken grammar, the obvious branding slip-ups. The scam in your inbox looks perfect now.
Scroll down. Watch us catch one in real time.
Meet John Doe.
He just messaged you.
A senior recruiter at a real company, a remote role paying well above market, a message that reads warmly. The grammar is clean. The tone is friendly. Ten years ago, that was enough.
It isn't anymore.
subject under analysis
He looks normal.
The details don't.
Before you've finished reading the message, we've run fourteen checks on John. Six came back red.
Money talks.
Too-good money shouts.
We check every salary against real market data the moment it hits your inbox. John's offer is 33% above what this role actually pays. When it sounds too good to be true, it almost never is true.
Two domains. One is pretending to be Acme.
The real Acme Corp is seven years old with 4,200 employees and working email authentication. John's version is a 47-day-old look-alike with none of it — and he's nowhere in the real company's directory.
- Domain age
- 2847 days
- SPF
- PASS
- ScamAdviser
- 94/100
- Domain age
- 47 days
- SPF
- FAIL
- ScamAdviser
- 8/100
The coding task
steals your SSH key.
Before you even open John's challenge, we read every line. It steals the key that unlocks your GitHub, your servers, your pipelines.Before you even open John's “coding challenge,” we read every line. It quietly reaches into your home folder, copies the key that unlocks your GitHub, your servers, your deploy pipelines — and ships it to a server on the other side of the world.
Microsoft and Mandiant have a name for this campaign: .
Real things
connect to real things.
John's story doesn't connect.
Every entity, every link, mapped in one picture. The cyan lines are what's real — a seven-year-old company with a verified domain. The magenta lines are where John's story falls apart.
- What doesn't add up
- Not an Acme employee
- Fake look-alike domain
- Domain mismatch
- Repo built 34h ago
- Sends data to Tor
Confirmed pattern ·
John Doe doesn't work at Acme. His domain is fake. His “coding test” was built to steal the keys to your accounts. One DM, one posting, one repo — and $501M stolen from people just like you last year. You were about to be next.
The next one
won't catch you.
Get on the list. When Velanthar launches, we'll watch every recruiter DM, every job posting, every offer letter that crosses your inbox — and flag the scams before they waste a week of your life or empty your bank account.
Free while we're in beta. No spam. Unsubscribe any time.