Blog
IP Reputation: How Security Teams Actually Use It in the Real World
IP reputation used to be something analysts checked manually when an alert looked suspicious. Today, it’s a decision engine, quietly influencing what gets blocked, escalated, or ignored across the security stack. At its core, IP reputation answers a simple question:...
Phishing Threat Intelligence – How Contextual Data Exposes Modern Phishing Campaigns
Phishing has always been about deception, but today, it’s not just about a fake email. It’s about obfuscation and infrastructure. Attackers now build entire ecosystems of redirectors, cloud storage, and short-lived domains to host credential-stealing pages. The result...
Phishing Detection in the Real World: Stopping the QuickBooks “Electronic Signature” QR Scam
Phishing detection is a fast-moving game of cat and mouse. We recently received a message from the popular QuickBooks accounting software which turned out it was a phishing scam. Let's take a deep technical dive into how threat actors are leveraging legitimate...
VirusTotal End of Life: What You Need to Know — and How alphaMountain Can Help
Introduction For nearly two decades, security teams have relied on VirusTotal as a go-to tool for checking files, URLs, domains, and IPs against a massive crowdsourced database of threat verdicts. But as of 2025, VirusTotal is reaching its end of life as a...
How Snopes Used threatYeti to Expose the Trader Joe’s Gift Basket Scam: The Case for a Malicious URL Checker
When a post promising a Trader Joe’s gift basket for just $12 began circulating on Facebook, it didn’t take long for thousands of people to click, share, and wonder if the deal was too good to be true. According to a recent Snopes investigation, it was exactly that: a...
Domain Classification: Past, Present, and Future
What Is Domain Classification? Domain classification is the process of assigning categories or reputational scores to a web domain or URL, typically based on its content, ownership, behavior, or security posture. In cybersecurity, it’s not just about labeling a site...