What Gridinsoft observed on Assetara.ai
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260901182209-5c2adc06
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Suspicious Website
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The current Suspicious Website classification is retained. It is supported by the site's active high-risk crypto investment and return solicitation, a material mismatch in displayed review trust signals, and incomplete public verification of important operating and security claims. No specific malware object or current phishing receiver was found, so this verdict must not be described as a malware-sample finding or a demonstrated malicious URL.
Analyst findings
Review 8 documented observations View evidence
The root upgraded to HTTPS and redirected only to the same-site English homepage. Fourteen representative public pages for the company, security, team, support, authentication, token, ICO, AI trading, legal terms, and privacy returned expected Assetara content. No unrelated automatic redirect, popup, iframe, or executable delivery was observed in this reviewed surface.
-
HTTP status
200 -
Final URL
https://assetara.ai/en -
Redirect destination
https://assetara.ai/en - Analyst observation The reviewed public navigation remained on assetara.ai except for clearly labeled social, blockchain-explorer, and security-tool links.
The current site actively promotes a crypto-investment ecosystem rather than an informational placeholder. Public pages invite users to create an account, deposit cryptocurrency, select investment and staking plans, use an ICO and token, monitor profits, and withdraw funds. The public copy includes an illustrative 18.4% estimated APR, daily-profit language, predictable-reward language, and automated AI management claims.
- Page element Deposit from $10; select an investment plan; monitor profits and withdraw funds.
- Page element Illustrative estimated APR: 18.4%.
- Page element Public ecosystem copy describes staking, ICO participation, prediction-market payouts, crypto deposits, and daily-profit partner activity.
- Analyst observation These are current financial-risk and consumer-fund flows, not a generic corporate brochure.
The current login and registration interfaces are same-brand, same-origin account flows. A public URL-scanner record tagged by its submitter as a phishing report resolved to an Assetara invite and the same assetara.ai registration page. Replaying the path produced the same-origin registration page; no unrelated credential receiver or destination was observed.
-
HTTP status
200 -
Final URL
https://assetara.ai/en/register - Page element The form requests an email address and a new Assetara account password and supports an optional invite code.
- Analyst observation The public scanner tag is submission context, not an engine verdict or preserved malicious behavior.
The homepage presents an 'Excellent 4.8 out of 5' trust claim with 137 reviews. The linked public Trustpilot profile currently shows 16 reviews, makes the rating unavailable because of a guidelines breach, and states that a number of fake reviews were removed. The current site therefore displays a material trust representation that does not match the linked public review record.
- Page element Homepage trust claim: Excellent 4.8 out of 5, 137 reviews.
- Public artifact URL https://www.trustpilot.com/review/assetara.ai
- Analyst observation The public review profile showed 16 reviews, an unavailable rating, and a notice that fake reviews had been removed.
The site publishes company, security, token, contract-address, risk-disclosure, terms, privacy, and downloadable project materials. It also makes custody, audit, regulatory-compliance, performance, and assets-under-management claims. Audit reports are described as available on request rather than linked as current public reports, and the name Assetara was not present in the reviewed current public Seychelles FSA capital-markets, collective-investment-scheme, or licensed-VASP lists.
- Page element Security page: audit reports available on request.
- Page element The public site displays token and smart-contract addresses and offers downloadable terms, privacy, presentation, memorandum, tokenomics, and whitepaper PDFs.
- Public artifact URL https://fsaseychelles.sc/regulated-entities/capital-markets/
- Public artifact URL https://fsaseychelles.sc/regulated-entities/collective-investment-scheme
- Public artifact URL https://fsaseychelles.sc/vasp/licensed-vasps
- Analyst observation A company-incorporation record and a financial-services authorization are different facts; the reviewed public sources did not establish the latter for Assetara.
The apex resolved to 5.252.32.234, www used the apex as its canonical target, mail was routed through Cloudflare, and the TLS certificate was valid for assetara.ai and www.assetara.ai. Public RDAP records show registration on June 17, 2025. These facts establish a stable current technical identity but do not validate the investment claims.
- DNS fact assetara.ai A 5.252.32.234
- DNS fact Nameservers: perla.ns.cloudflare.com and sonny.ns.cloudflare.com
- Certificate fact Valid certificate for assetara.ai and www.assetara.ai from 2026-06-24 through 2026-09-22.
- Public artifact URL https://rdap.org/domain/assetara.ai
The public archive returned seven distinct successful records. The oldest reviewed homepage snapshot, from November 24, 2025, was a GoDaddy-hosted Assetara 'Launching Soon' page. The archived index did not expose a preserved executable, archive, credential-harvesting path, or malicious redirect for this host.
- Public artifact URL https://web.archive.org/web/20251124120829id_/https://assetara.ai/
- Page element Archived title: assetara.ai; description: Launching Soon.
- Analyst observation The available archive history is sparse and does not prove that every historical URL was safe.
No specific malware file, payload, harmful executable, phishing receiver, malicious hash, or current URL with reproduced harmful execution was identified in the reviewed public pages, downloads, redirects, public URL-scanner metadata, or archive records.
- Analyst observation The retained caution category is a domain-level risk assessment and is not a claim that a specific malware sample was found.
Scope and limitations
- The review covered the unauthenticated public website and did not create an account, deposit funds, connect a wallet, sign a transaction, or test withdrawals.
- Private customer accounts, private audit reports, internal trading records, custody controls, server-side systems, and non-public compliance records were not available for review.
- The public archive is sparse and cannot establish the behavior of every historical URL.
- Public URL-scanner metadata for one invite path contained a submitter tag but no retrievable engine or community verdict; the path was independently replayed and assessed only by its current observed behavior.
- The exact host is the registrable parent domain assetara.ai; www.assetara.ai was reviewed only as its canonical alias.
Help protect others by sharing this page on social media! The more people who know about assetara.ai, the fewer chances they have to deceive someone else. Help others evaluate assetara.ai by sharing this page on social media!