What Gridinsoft observed on Academiauniversocreativo.com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260901184246-37380f50
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- No Malware Object Reproduced — Store and Checkout Scope Remain Unsettled
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The current first-party review confirms that academiauniversocreativo.com hosts real drawing-course content and did not reproduce a malicious redirect, phishing flow, automatic executable delivery, or a specific harmful URL, file, payload, or hash. That does not support a malware-sample claim. A domain-wide Safe conclusion is not supported, however, because the exact host also exposes numerous unrelated funnels, including categorical sexual-health claims, depends on separate checkout hosts, lacks several expected merchant-policy and identity pages, has only a short public history, and could not be tested through payment and post-purchase delivery. The existing cautious Unsettled Website classification does not conflict with this inconclusive first-party result.
Analyst findings
Review 9 documented observations View evidence
The exact apex host returned its own Shopify storefront with HTTP 200. HTTP upgraded to HTTPS, and the www host redirected to the apex. Repeated command-line requests did not reproduce an automatic redirect from the reviewed apex to an unrelated site.
-
HTTP status
200 -
Final URL
https://academiauniversocreativo.com/ -
Redirect destination
https://academiauniversocreativo.com/ - MIME type text/html; charset=utf-8
- Page element Title: Universo Creativo
The customer's drawing-course description was confirmed in part. The storefront exposed a priced Academia Dibujo Creativo product, drawing-course sales pages, video-course descriptions, practical projects, and public lesson pages using Shopify, Loom, Google Drive, and the related storefront domain.
-
HTTP status
200 - Page element Product: Academia Dibujo Creativo
- Page element Description: step-by-step video classes, practical exercises, and guided drawing projects
- Page element The reviewed course pages listed drawing fundamentals, anatomy, manga, illustration, and more than 200 guided projects.
- Analyst observation Public course pages linked to hosted lesson videos and documents; no executable or archive download was initiated in the reviewed paths.
creativeuniversestudio.com returned the same Shopify shop and product under another market and language configuration. The reviewed apex did not redirect there during direct navigation; the two domains appeared as alternate storefronts for the same shop rather than an observed harmful redirect destination.
-
HTTP status
200 -
Final URL
https://creativeuniversestudio.com/ - Page element Both storefronts identified the shop as Universo Creativo and exposed the Academia Dibujo Creativo product.
- Analyst observation The page metadata linked academiauniversocreativo.com and creativeuniversestudio.com as alternate storefront locales for the same Shopify shop.
The exact host was not limited to drawing education. Its current sitemap listed 43 public pages, including unrelated digital-product funnels. One reviewed page marketed a sexual-performance program with absolute outcome claims and statements that medication, medical treatment, and prolonged therapy were unnecessary; the page did not identify a clinical evidence source or qualified medical provider in the reviewed content.
- Page element The current pages sitemap listed 43 public page URLs.
- Page element The sitemap included drawing, watercolor, painting, coffee, recipes, cosmetics, children's activities, knitting, and sexual-performance funnels.
- Page element The reviewed Codigo Rojo page claimed sexual-performance outcomes without medication, medical treatment, or prolonged therapy.
- Analyst observation No clinical citation or qualified medical provider was identified in the reviewed Codigo Rojo page content.
Representative drawing sales pages sent buyers to separate impultienda.ar checkout hosts. Two drawing checkouts returned HTTP 200 and requested email, name, phone, and card payment through a Stripe interface. The external checkout linked from the reviewed sexual-performance funnel returned HTTP 404. No buyer data or payment was submitted.
-
HTTP status
200 - Page element Checkout fields requested email address, first name, last name, phone number, and a Stripe card payment method.
- Page element A second drawing-course checkout returned HTTP 200 with the same external checkout platform.
- Page element The codigorojo.impultienda.ar checkout path returned HTTP 404 during the review.
- Analyst observation No checkout form was submitted and no payment, delivery, refund, or post-purchase behavior was tested.
The storefront exposed a Shopify-generated privacy policy, but the tested about, contact, terms-of-service, refund-policy, and shipping-policy paths returned HTTP 404. The reviewed public policy surface did not establish a complete merchant identity or consistent refund and service terms for the broader set of funnels.
-
HTTP status
200 - Page element The privacy policy identified Universo Creativo as the store operator and described Shopify data processing.
- Page element The tested about, contact, terms-of-service, refund-policy, and shipping-policy paths returned HTTP 404.
- Analyst observation The reviewed policy pages did not provide a complete legal merchant identity or a consistent refund policy for the public sales funnels.
The reviewed storefront, representative public pages, product page, course-content links, scripts, redirects, cart, account entry, and external checkout surfaces did not reproduce phishing, an automatic executable or archive download, or a specific malicious URL, file, payload, or hash.
- Analyst observation No password or recovery-phrase collection form was present on the reviewed apex storefront pages.
- Analyst observation No automatic executable or archive download was initiated during the reviewed requests.
- Analyst observation No exact malicious URL, file, payload, hash, or observed malware execution was identified in the reviewed current scope.
The apex and www hosts resolved to Shopify infrastructure and presented valid host-specific TLS certificates. Public registration data showed that academiauniversocreativo.com and the related creativeuniversestudio.com storefront were both registered on 2026-08-12, leaving only a short public operating history at review time.
- DNS fact academiauniversocreativo.com resolved to 23.227.38.65.
- DNS fact www.academiauniversocreativo.com was a CNAME to shops.myshopify.com.
- Certificate fact The apex certificate covered academiauniversocreativo.com and was valid from 2026-08-11 through 2026-11-09.
- Certificate fact The www certificate covered www.academiauniversocreativo.com and was valid from 2026-08-11 through 2026-11-09.
- DNS fact Public registration data recorded both storefront domains on 2026-08-12.
The bounded Wayback search returned no preserved snapshots for the apex, www host, or related storefront. The current review therefore could not independently compare the present deployment with an older public history or verify past fulfillment and remediation claims.
- Analyst observation The Wayback CDX query returned zero preserved HTTP 200 snapshots for academiauniversocreativo.com and www.academiauniversocreativo.com.
- Analyst observation The Wayback CDX query returned zero preserved HTTP 200 snapshots for creativeuniversestudio.com and www.creativeuniversestudio.com.
Scope and limitations
- The review covered the apex, www alias, related Shopify storefront, current sitemap, representative drawing and non-drawing pages, product data, cart and account entry, scripts, DNS, TLS, redirects, and representative external checkout entry pages.
- No account was created, no credentials or personal data were submitted, no purchase was made, and no payment, subscription, refund, fulfillment, download entitlement, or post-purchase support flow was exercised.
- The public drawing-course pages linked to many Loom and Google Drive objects. Representative navigation and link types were reviewed, but every hosted lesson and document was not opened or downloaded.
- The review did not verify ownership or licensing of every educational asset, the authenticity of testimonials, clinical efficacy claims, fulfillment history, refund performance, or the real-world identity of the operator.
- No preserved public archive snapshot was available for the reviewed domains, so the result cannot establish a longer operating history or predict future changes.
Help protect others by sharing this page on social media! The more people who know about academiauniversocreativo.com, the fewer chances they have to deceive someone else. Help others evaluate academiauniversocreativo.com by sharing this page on social media!