What Gridinsoft observed on applaunch.org
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260914164437-886e627b
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Operator surface reviewed; tenant content not certified
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
No current harmful object supports the broad operator-domain detection. Removing that warning does not certify all hosted, private or future content.
Analyst findings
Review 3 documented observations View evidence
The apex and www lead to the same AppLaunch hosting website. HTTP now redirects to HTTPS, correcting the earlier transport observation. The published acceptable-use policy prohibits malware and phishing, describes automated flagging of public Portfolio content with human review and appeals, and provides an abuse contact. These are published commitments, not proof of universal enforcement.
- Public artifact URL https://applaunch.org/
- Public artifact URL https://www.applaunch.org/
- Public artifact URL http://applaunch.org/
- Public artifact URL https://applaunch.org/acceptable-use
- Public artifact URL https://applaunch.org/legal
The supplied security document lists 35 exact hosts and 2 wildcard namespaces. Bounded checks of the exact hosts found operator pages, restricted Cloudflare Access services, password-protected dashboards, a default WordPress page, offline services, missing routes and certificate failures. No current malware payload or phishing receiver was identified in the accessible content. Restricted or unavailable services were not treated as clean.
- Public artifact URL https://applaunch.org/
- Public artifact URL https://testingfixraid.sites.applaunch.org/
The operator reports a compromised staging site at portfolify.online that was taken down and remediated. The current address displays a domain-expiration page. This confirms the present parking state, not the historical incident details or remediation effectiveness.
- Public artifact URL https://portfolify.online/
Scope and limitations
- No authentication, content upload or attack testing was performed. The supplied document is an operator statement, not an independent audit; screening effectiveness, private services, wildcard content and historical incident remediation were not verified.
Help protect others by sharing this page on social media! The more people who know about applaunch.org, the fewer chances they have to deceive someone else. Help others evaluate applaunch.org by sharing this page on social media!