Case ef01a20c

8.1/ Elevated60% confidence

Source: LinkedIn
Submitted: 02/06/2026
Published: 22/07/2026
Verdict: v2 · 04/09/2026
Engine: 5c766bbb4aa0
JSON: report.json

What it does

Verdict	Elevated
Code	No repository code was examined
Conversation	5 signals of a recruitment scam in the conversation: runnable repo, suspected breached profile, unknown project brand, flattery, salary stated upfront

This case presents a high-risk scenario for a recruitment scam, with several indicators pointing to malicious intent. The communication channel, a LinkedIn direct message, is a common vector for such scams. Evidence suggests the presence of a runnable repository, which could be used to deliver malware or extract sensitive information. The sender's use of flattery, coupled with an upfront salary statement, are tactics often employed to build trust and entice victims. Furthermore, the mention of an unknown project brand and the suspicion of a breached profile raise concerns about the legitimacy of the opportunity and the sender's identity. These signals align with past malicious cases involving similar patterns, including the use of runnable repositories and exfiltration patterns, reinforcing the assessment of high risk.

Conversation

[REPORTER]

[View [REPORTER] profile]([PROFILE_URL_REDACTED]) Hi [SUBJECT], thank you for reaching out. I would like to learn more about this opportunity.

Subject AS-a104

[View [SUBJECT]’s profile]([PROFILE_URL_REDACTED]) Please feel free to find full job description. [https://decryptcode-com.breezy.hr/p/ba479e2d10a7](https://decryptcode-com.breezy.hr/p/ba479e2d10a7) If you are interested in this position, you can apply directly or share your updated resume here. Looking forward to connecting! Kind regards, Subject AS-a104 [[SUBJECT].[SUBJECT]@decryptcode.com](mailto:[SUBJECT].[SUBJECT]@decryptcode.com)(Edited) [](https://decryptcode-com.breezy.hr/p/ba479e2d10a7-senior-web3-blockchain-engineer-remote-full-time) [Senior Web3/[REPORTER] (Remote, Full-Time) at Decryptcode-comdecryptcode-com.breezy.hr](https://decryptcode-com.breezy.hr/p/ba479e2d10a7-senior-web3-blockchain-engineer-remote-full-time)

[REPORTER]

[View [REPORTER] profile]([PROFILE_URL_REDACTED]) Thanks 🙏 I will do that tomorrow. BR Wednesday [View [REPORTER] profile]([PROFILE_URL_REDACTED]) Hi [SUBJECT], here is my CV. Best R[REPORTER]CV.pdf 134 KB Download

Subject AS-a104

[View [SUBJECT]’s profile]([PROFILE_URL_REDACTED]) I’ll review your resume and follow up with you shortly. Thank you! [View [SUBJECT]’s profile]([PROFILE_URL_REDACTED]) Thank you for sharing your resume. We were very impressed with your experience and qualifications. Let’s move forward to the next step. As you know, many candidates on LinkedIn present strong backgrounds and recommendations. To ensure a fair and accurate evaluation of technical ability, we prioritize a structured technical review rather than relying solely on profiles. To keep the process efficient and respectful of everyone’s time, we begin with a short take-home assessment before scheduling interviews. You are welcome to use any AI tools (such as Cursor) as part of your workflow - our focus is on your technical reasoning, decision-making, and how you approach real problems, rather than speed or memorization. Since this is a part-time role, the process is intentionally lightweight. After the assessment, if everything aligns, we’ll move directly to a final conversation to confirm mutual fit, availability, and next steps. If this works for you, please let me know when you’d be able to start the assessment, and I’ll share the details. Kind regards, Subject AS-a104 [[SUBJECT].[SUBJECT]@decryptcode.com](mailto:[SUBJECT].[SUBJECT]@decryptcode.com)

[REPORTER]

[View [REPORTER] profile]([PROFILE_URL_REDACTED]) Hi [SUBJECT], thanks for your message. Is it a part time role? Because above you did write that it's full time. And what is the assessment? Best

Subject AS-a104

[View [SUBJECT]’s profile]([PROFILE_URL_REDACTED]) Sorry for the confusion. This is a full-time role. I mixed it up earlier because we are currently hiring for two different positions. [View [SUBJECT]’s profile]([PROFILE_URL_REDACTED]) You can find the assessment at the link below: [https://github.com/decryptcode-inc/take-home-assessment](https://github.com/decryptcode-inc/take-home-assessment) Please review the ASSESSMENT.md file carefully for detailed instructions. Once completed, create a GitHub repository and share the URL with us. You’re welcome to use any AI tools as part of your workflow. If you have any questions or run into any issues, feel free to reach out. Kind regards, Subject AS-a104 [[SUBJECT].[SUBJECT]@decryptcode.com](mailto:[SUBJECT].[SUBJECT]@decryptcode.com) [](https://github.com/decryptcode-inc/take-home-assessment) [GitHub - decryptcode-inc/take-home-assessmentgithub.com](https://github.com/decryptcode-inc/take-home-assessment)

[REPORTER]

[View [REPORTER] profile]([PROFILE_URL_REDACTED]) Hi [SUBJECT], thanks for the info. To make sure we're on the same page before moving forward, could you share the compensation range for this role?

Subject AS-a104

[View [SUBJECT]’s profile]([PROFILE_URL_REDACTED]) Thanks for confirming. The compensation range for this role is $160k - $190k / yr. If you have any question, please message me to [[SUBJECT].[SUBJECT]@decryptcode.com](mailto:[SUBJECT].[SUBJECT]@decryptcode.com). Kind regards, Subject AS-a104

Signals

Signal	What it means	Severity	Found by
runnable repo	runnable repo	medium	the engine
suspected breached profile	Reporter suspects the profile was compromised or stolen	medium	the submitter
unknown project brand	Project brand not verifiable online	medium	the submitter
flattery	Excessive flattery — common trust-building tactic in scam recruitment	low	the engine
salary stated upfront	High salary offered before any vetting — common LinkedIn bait	medium	the submitter

What to do

Do not run any code or installer this contact sends; check it here first.
Verify the recruiter through the company's own careers page or a known employee, not through the link they gave you.
Do not share credentials, seed phrases or remote access, whatever the reason given.

What we could not see

Code	No repository code was examined; the verdict rests on the conversation.
Layers	every layer ran

References

repository https://github.com/decryptcode-inc/take-home-assessment

Versions

Version	Date	Band	Engine	Stages
2	04/09/2026	Elevated	5c766bbb4aa0	engine
1	22/07/2026	Elevated	legacy-pre-g	engine

Disclaimer: This report is based on community-submitted information and automated analysis. It does not constitute legal advice or a definitive determination of fraud. Named or described entities may contest this report — if you believe this case contains inaccurate information, you may submit a correction or appeal. RTIdx processes takedown and correction requests within 7 days.