What Gridinsoft observed on chainpal.org
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20261013194752-eea6348e
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Inconclusive
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The stated public observations do not establish a specific current harmful object. The conclusion is limited to the assessed scope; unseen content and services are not certified.
Analyst findings
Review 2 documented observations View evidence
The apex and www lead to ChainPal’s stablecoin-payment business site. Privacy, terms and security pages and the published security contact were checked. App and pay hosts serve the same branded application bundle; the API identifies ChainPal. These observations do not verify custody claims, regulatory status, transfers, private accounts or every merchant payment link; no wallet was connected or payment made. No current harmful object was reproduced in the listed public scope. Operator-assisted Firefox showed the app’s own work-email/password login; the pay root displayed a missing-link message, not an actual invoice.
- Public artifact URL https://chainpal.org/
- Public artifact URL https://www.chainpal.org/
- Public artifact URL https://chainpal.org/.well-known/security.txt
- Public artifact URL https://app.chainpal.org/
- Public artifact URL https://pay.chainpal.org/
- Public artifact URL https://api.chainpal.org/
- Public artifact URL https://chainpal.org/privacy-policy
- Public artifact URL https://chainpal.org/terms-and-conditions
- Public artifact URL https://chainpal.org/company/security
- Public artifact URL https://chainpal.org/marketing/assets/site.js
- Public artifact URL https://app.chainpal.org/assets/index-Ad6eRPt1.js
- Analyst observation Operator-assisted Firefox checked public app login and pay missing-link display at 2026-10-13T19:43–19:44Z; no credentials, wallet or payment submitted.
Public indexes, URL-scanner records, threat-intelligence and archive searches were checked for the exact hosts and parent where relevant. Domain-level labels are context, not a reproduced harmful object; failed or empty searches do not establish safety.
- Analyst observation chainpal.org | scanner_index | 200
- Analyst observation chainpal.org | threat_intelligence | 200
- Analyst observation chainpal.org | archive_index | Unavailable
Scope and limitations
- Only the listed public objects were assessed. Interactive browser-only flows, private accounts, transactions, server files and complete executable binaries were not audited; business, product and cleanup claims and completion of third-party feed updates are not independently certified.
Help protect others by sharing this page on social media! The more people who know about chainpal.org, the fewer chances they have to deceive someone else. Help others evaluate chainpal.org by sharing this page on social media!