What Gridinsoft observed on axiompro.app
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260927094553-69dc7481
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Suspicious Website
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The current first-party review supports retaining the Suspicious Website classification because the site deliberately hides a full-screen crypto-trading referral interstitial from automated review tools. No specific malware payload was reproduced in the sampled public scope.
Analyst findings
Review 3 documented observations View evidence
The apex and www hosts returned the same public affiliate site over HTTPS, and the footer disclosed that it is independent and not operated or endorsed by Axiom.
-
HTTP status
200 - Analyst observation axiompro.app and www.axiompro.app returned the same 30014-byte homepage; www resolved to the same service.
- Analyst observation The footer identifies the site as an independent affiliate and links primary calls to https://axiom.trade/@tradenow.
The sampled public pages did not expose a credential form, wallet interaction, or malware download. The download page said no official app or APK was provided and directed visitors to the external web application.
- Analyst observation No form element or automatic download was identified on the reviewed homepage.
- Analyst observation https://axiompro.app/download/ stated that no official app or APK was offered.
- Analyst observation The review did not reproduce a specific malware file, credential submission, or wallet connection.
A local script scheduled a full-screen trading offer for ordinary visitors after 1.4 seconds but deliberately suppressed it for crawlers and automated review tools.
- Analyst observation The script used navigator.webdriver and a broad user-agent list including curl, wget, Playwright, Puppeteer, scanners, and search engines to suppress the modal.
- Analyst observation For other visitors, the modal call to action linked to https://axiom.trade/@tradenow.
- Analyst observation The script comments explicitly described that automation tools would not see the modal.
Scope and limitations
- The review covered sampled public pages, DNS, returned scripts, public indexes, and archived availability at the recorded time; it did not cover every page or future change.
- The external referral destination was identified from the site link but its downstream application content was not included in this review.
- External vendor warnings were recorded only as context and were not used to determine this verdict.
Help protect others by sharing this page on social media! The more people who know about axiompro.app, the fewer chances they have to deceive someone else. Help others evaluate axiompro.app by sharing this page on social media!