LONGVIEW
GRC (governance, risk and compliance)
Volunteer researcher, Cybersecurity Reach Foundation
About
Pammi Balani is a cybersecurity student at Baruch College who investigates phishing sites and typosquatted domains with CSRF, using OSINT tools to publish findings-based articles. She also manages tech and community platforms for ISACA Baruch and is working toward her CompTIA Security+.
Published research
October 30, 2026
One Rule, Thousands of Scams: The Case for Blocking com- Domains
Scammers put "com-" right after a brand name (for example amazon[.]com-apstorelogin[.]us) so a fake link passes a quick glance. Using CSRF phishing feeds, ICANN zone data and a list of nearly 2 million known good domains, this research finds that blocking every web address containing com- catches all com- scam domains in the feeds while blocking about 0.02% of known good domains, and recommends a block-first, allowlist-second policy backed by training.
April 8, 2026
Rixav[.]sbs: A Crypto Wallet Phishing Site
rixav[.]sbs impersonates a wallet recovery service to trick users into entering their seed phrases and private keys. This report documents how the scam works, what the site does with your credentials, and why any wallet that touched it should be considered compromised.
March 2, 2026
Spiderfoot.org: Google Search Mislabels an Unofficial SpiderFoot Site
An unofficial website appearing in search results for the SpiderFoot OSINT tool may be misleading users into downloading software through untrusted channels. Despite the site itself stating it is not affiliated with the official project, search engine AI summaries identify it as the legitimate source
The investigations on this site are written by volunteers. Apply if you want to research scams and attacks and publish the findings under your name.
