Original defensive research
Evidence-led research on ClickFix, phishing and malicious-delivery techniques—including what URL scanners miss and how defenders can verify the signals.
Research note
Initial HTML is often the least interesting part of a ClickFix page. Reliable analysis needs timed snapshots, constrained interaction, clipboard instrumentation and evidence correlation.
Read research note →Research note
The logo is not the signal. Hosting origin, widget structure, requested action, clipboard behaviour and operating-system instructions reveal whether a verification flow is plausible.
Read research note →Check a destination