What Gridinsoft observed on 7pic.de
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20261025182746-858df702
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- User-generated image hosting
- Evidence basis
- First-party site analysis External vendor intelligence: Contradictory context — not used for this decision
No phishing object was reproduced in the reviewed public hosting pages. User-generated content and unvisited advertising destinations remain outside this bounded assessment.
Analyst findings
Review 3 documented observations View evidence
The public apex and www entry show 7pic image hosting with file/URL upload, Adult/Family Safe choices and its own account navigation. The /login form posts to the same 7pic origin; its Google and Facebook links point to the respective provider domains, with 7pic return URLs. No third-party brand imitation or credential exfiltration was reproduced in these inspected elements. Provider authentication and account creation were not completed.
- Public artifact URL https://7pic.de/
- Public artifact URL https://www.7pic.de/
- Public artifact URL https://7pic.de/login
- Public artifact URL https://7pic.de/p/terms-of-service
- Public artifact URL https://7pic.de/p/privacy-policy
- Public artifact URL https://7pic.de/p/contact
The public /v/5 page displays Wald.jpg, a forest image, sharing links and a report-abuse form. Google-served ads included games and an Easy Login extension promotion; no ad destination was clicked and no extension or payload was installed or executed. No phishing or malicious download was reproduced in this sampled image page. The visible abuse-report interface does not establish how effectively reports are handled.
- Public artifact URL https://7pic.de/v/5
- Page element Rendered Wald.jpg forest image, sharing fields and report-abuse form; advertising and Google vignette shown during navigation
URLscan returned three September root-page records within its 30-day search window, displaying the image-hosting title. A submitter-supplied phish_report tag does not reproduce a phishing object. OTX returned no pulses for apex or www and one root-URL entry with no Safe Browsing match; this is limited coverage. Historical page content and the original cause of the warning were not established. Avira currently reports Phishing and Norton reports malicious. The separately available URL-vendor list contains no external detections. These conflicting external results do not identify a phishing object in the reviewed pages and were not assumed stale.
- Public artifact URL https://urlscan.io/result/01a0ee9b-351d-75c1-9bd2-48abc185186b/
- Public artifact URL https://otx.alienvault.com/indicator/domain/7pic.de
- Public artifact URL https://otx.alienvault.com/indicator/domain/www.7pic.de
- Public artifact URL https://www.virustotal.com/gui/domain/7pic.de
Scope and limitations
- No file or URL upload, account creation, provider sign-in, abuse submission or ad click was performed. Private features, server-side storage and moderation effectiveness were not audited.
- Only one public image was inspected. All uploaded images, embedded links and changing advertising destinations were not reviewed; legality of all hosted material is not certified.
- Historical content and the original warning trigger were not established. External vendor warnings remain contrary evidence and are not equivalent to reproduced credential theft.
Help protect others by sharing this page on social media! The more people who know about 7pic.de, the fewer chances they have to deceive someone else. Help others evaluate 7pic.de by sharing this page on social media!