Thank you very much for this explanation,
After case of Decracy (on pages 3), I am making a report, because I think something wrong with that project, hidden original link with short link. So, I have not downloaded their files, because I never know linktree before. But I am happy dev team make it clear with his clarify. For Popup, I reported above, I am not downloading file because as many users say not safe for download file from Mega. so I am just sharing their links and check it on VT. Because I found original thread for PopUp coin, of cours,e this wallet is fake, so I reported here.
Yup, this is how I check their wallets, downloading files and check it on virus desk, but I'm just downloading if their files hosted on github or bitbucket.