What Gridinsoft observed on Adriqon.com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260903173950-57663bdf
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Suspicious Website
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The current Phishing category was too specific and was not reproduced: the reviewed Adriqon pages contained no phishing form, impersonated service, external credential receiver, malware delivery, or harmful automatic navigation, and the historical chat widget request returned no captured content. A Safe result is also not supported. Adriqon currently solicits leveraged CFD and OTC trading customers, sends account access to a separate host, does not disclose a verifiable legal entity or regulatory identifier, and publishes a client agreement with an unrelated complaint email domain. Those reproducible first-party disclosure and onboarding risks support the narrower Suspicious Website category. External blacklist labels were recorded separately and did not determine this verdict.
Analyst findings
Review 6 documented observations View evidence
The current apex returned HTTP 200 after a same-host HTTP-to-HTTPS transition and presented a public CFD and OTC trading service. Twelve sitemap routes returned HTTP 200. The reviewed Adriqon pages did not present a password field, impersonated third-party login, automatic file delivery, or unrelated automatic redirect.
-
HTTP status
200 -
Final URL
https://adriqon.com/ - Page element The site advertised forex, indices, commodities, and shares trading and account tiers beginning at EUR 1,000.
- Analyst observation The sitemap exposed twelve public routes; all twelve returned HTTP 200 during the review.
- Analyst observation The public pages contained no password input, executable or archive download link, unrelated automatic navigation chain, or first-party credential-collection form.
The site solicited customers for leveraged CFD and OTC trading and sent account-opening and login actions to a separate accountplatforms.com host. The reviewed public pages and linked legal documents did not disclose a legal entity name, company registration number, Financial Services Provider number, OTC derivatives provider licence number, or physical business address that would let a visitor link the service to a specific regulated entity.
- Public artifact URL https://adriqon.com/pricing
- Public artifact URL https://adriqon.com/legal
-
Redirect destination
https://client.accountplatforms.com/login - Page element The client agreement described Adriqon.com as an authorised financial service and OTC derivatives provider and referred to Financial Sector Conduct Authority regulation, but supplied no named legal entity or licence identifier.
- Analyst observation The separate account host returned a web-application-firewall challenge to the review request; no account was created and no private onboarding flow was accessed.
The legal-document set was internally inconsistent. The client agreement directed complaints to [email protected], an unrelated domain, while the separate complaints policy used [email protected]. The documents repeatedly called the contracting party only Adriqon.com or the Company and did not resolve the missing legal identity or licence identifiers.
- Page element Client Agreement section 41.4: complaints may be submitted by email to [email protected].
- Page element The separate Complaints Management Policy used [email protected].
- Analyst observation All six legal PDFs were downloaded from the current Adriqon legal page and reviewed across 57 rendered pages; no legal entity name, company registration number, Financial Services Provider number, OTC derivatives provider licence number, or physical address was found.
A public urlscan capture from August 12 recorded a request for chat.vavtex.com/widget.js, but the request failed and no response content was received. A later August 24 capture no longer contained that host, and the current Adriqon pages also did not reference it. The historical record therefore confirms a removed exact URL reference, not an observed malicious script or payload.
- Public artifact URL https://urlscan.io/result/019ff601-9e38-70d9-9caa-ca3afaf30787/
- Public artifact URL https://urlscan.io/result/01a03521-be1b-747e-ac2e-3ea7626aecef/
- Analyst observation The August 12 scan metadata described the widget request as failed with no response received; the scan itself displayed no classification.
- Analyst observation The August 24 scan and the current twelve-page source inventory contained no chat.vavtex.com reference.
A fresh Gridinsoft scan reached the expected Adriqon site with HTTP 200 and recorded no positive first-party behavior signal. The external matrix contained 55 harmless, 2 malicious, 0 suspicious, and 32 undetected results; the two malicious results were alphaMountain.ai and CRDF blacklist methods. Public OSINT did not expose a sample-level or URL-specific harmful object.
- Analyst observation The fresh Gridinsoft report reached Home — Adriqon, recorded a same-site HTTP-to-HTTPS transition, and exposed an empty positive behavior-signal list.
- Analyst observation alphaMountain.ai labelled the domain phishing and CRDF labelled it malicious by blacklist method; these entries supplied no exact malicious URL, response body, file, payload, hash, or execution trace in the available report.
- Analyst observation AlienVault OTX returned zero pulses for adriqon.com and for chat.vavtex.com.
- Analyst observation Public urlscan search returned three Adriqon captures, all with HTTP 200 and no displayed classification; no public sandbox-index search result identified a malicious sample for the exact host.
- Analyst observation Wayback CDX returned no capture for the apex or www host. Certificate Transparency results contained only Adriqon service hostnames. Absence from those incomplete indexes was treated as unknown rather than proof of safety.
- Analyst observation Direct URLhaus and ThreatFox APIs required authentication during this review and were treated as unavailable, not as clean results.
The review did not identify a specific phishing page, impersonated service, external credential receiver, malware file, payload, hash, exploit response, harmful script response, automatic download, or unrelated automatic redirect on the reviewed Adriqon deployment. Domain blacklist categories are not equivalent to such an object.
- Analyst observation No exact harmful object was supplied with the ticket or found in the current public variants, twelve public routes, linked first-party scripts, legal documents, public URL-scanner metadata, threat-intelligence searches, sandbox-index searches, or available archive indexes.
- Analyst observation The old chat widget URL produced no captured response in the cited public scan and therefore cannot be described as a malware payload.
Scope and limitations
- The review covered public HTTP and HTTPS responses, all twelve sitemap routes, visible links and forms, first-party scripts, six legal PDFs, DNS, TLS, the current Gridinsoft report, public URL-scanner metadata, threat-intelligence and sandbox-index searches, Certificate Transparency, and available archive indexes. Private source code and server-side systems were not accessed.
- No customer account was created, no identity document or payment was submitted, no trade or withdrawal was attempted, and the separate account host's private flow remained behind a web-application-firewall challenge. The review therefore does not certify private onboarding, payment, custody, execution, or withdrawal behavior.
- The missing public legal identity and identifiers prevent the claimed regulatory status from being tied to a specific licence. This review records that verification gap and document inconsistency; it does not make a definitive legal finding that no licence exists.
- Public indexes, archives, and threat-intelligence sources are incomplete. Missing records were treated as unknown, and authenticated URLhaus and ThreatFox APIs were not available.
- The Suspicious Website verdict applies to the current reviewed public deployment. It is not proof of a malware sample, a finding of criminal conduct, certification of every page or private workflow, or a prediction about future content.
Help protect others by sharing this page on social media! The more people who know about adriqon.com, the fewer chances they have to deceive someone else. Help others evaluate adriqon.com by sharing this page on social media!