What Gridinsoft observed on clarastuebli.ch
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20261023134129-6d0da524
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Inconclusive
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The limited public review is Inconclusive. Current external warnings remain relevant to the unresolved incident-remediation question, while the observed restaurant pages did not reproduce those harmful behaviors.
Analyst findings
Review 1 documented observation View evidence
The apex redirects to the www restaurant website. The homepage, about, contact and reservation pages describe Clara Stübli in Basel. The reservation form requests date, time, party size and contact details. The inspected office701 script sends contact and reservation data to the site’s own /ch/ endpoint; no form was submitted. Selected interface code showed ordinary restaurant-page behavior. The March 2025 archive also shows the restaurant. An earlier compromise and a rebuild are reported, but the earlier affected objects and the remediation scope were not independently verified.
- Public artifact URL https://www.clarastuebli.ch/
- Public artifact URL https://www.clarastuebli.ch/ch/contact-ch
- Public artifact URL https://www.clarastuebli.ch/ch/reservation-ch
- Public artifact URL https://www.clarastuebli.ch/themes/clarastuebli/assets/js/office701.js
Scope and limitations
- Private hosting state, the complete rebuilt application/database and all earlier affected URLs were not audited. The claimed Google review and hosting-provider cleanup were not authenticated from original records.
Help protect others by sharing this page on social media! The more people who know about clarastuebli.ch, the fewer chances they have to deceive someone else. Help others evaluate clarastuebli.ch by sharing this page on social media!