Independent Gridinsoft analysis
What Gridinsoft observed on app.robinflow.io
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
Current review
Review ID
GMA-20261020074407-abe2b0ca
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Public market signal
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The exact AMBA share object did not reproduce phishing or wallet abuse, and the host warning was removed. The broader shared-signal namespace remains inconclusive because other objects were not assessed.
Analyst findings
Review 1 documented observation View evidence
The root and www show an options-analytics landing page. The supplied AMBA share link opens a market-signal card on app.robinflow.io in Firefox. No wallet connection, crypto giveaway or credential impersonation was reproduced there. The separate login is branded Robinflow. Selected website and share scripts and public terms/privacy were read; the privacy text describes Stripe-hosted checkout.
- Public artifact URL https://robinflow.io/
- Public artifact URL https://www.robinflow.io/
- Public artifact URL https://robinflow.io/t/AMBA/mvba9ivs
- Public artifact URL https://app.robinflow.io/t/AMBA/mvba9ivs
- Public artifact URL https://app.robinflow.io/login
- Public artifact URL https://robinflow.io/privacy
- Public artifact URL https://robinflow.io/terms
Scope and limitations
- No account was created, form submitted, wallet connected or payment made. Other share objects, private APIs, market-data accuracy, licences and actual hosted checkout were not audited. Auth and API service classifications were not changed.
Help protect others by sharing this page on social media! The more people who know about app.robinflow.io, the fewer chances they have to deceive someone else. Help others evaluate app.robinflow.io by sharing this page on social media!