A suspected fake-recruiter network used recently created GitHub and LinkedIn profiles to approach blockchain, Web3, cryptocurrency, cybersecurity, and online-gambling developers with technical-interview lures. The investigation links the Onder Kayabasi persona to multiple GitHub identities and maps at least 250 recruiter-themed accounts sharing similar biographies, creation dates, follower patterns, and questionable external identities. Two highly connected accounts, devmaster929 and sammorozov, followed many of these profiles, although the source does not establish that they controlled the network. Malicious interview projects could execute code directly or through npm dependencies and post-installation hooks when a target runs npm install.