What Gridinsoft observed on domainrating.app
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20261028214245-b824c539
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Inconclusive
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The inspected operator pages did not reproduce phishing; the wider directory and private account flows remain inconclusive.
Analyst findings
Review 2 documented observations View evidence
The apex, www, login, directory, privacy and terms pages returned HTTP 200. They present an SEO metrics service, alerts and a public directory with outbound links. The login page offers Google and X rather than requesting a password on this site.
- Public artifact URL https://domainrating.app/login
- Public artifact URL https://domainrating.app/privacy
- Public artifact URL https://domainrating.app/terms
- Public artifact URL https://domainrating.app/directory
Current authentication entries redirect to accounts.google.com and x.com with callbacks on domainrating.app. A 26 October URLscan record also ends at Google’s account page; its submitter’s phishing tag does not itself demonstrate theft. An earlier compromise was not established by this review. No account was authorized.
- Public artifact URL https://domainrating.app/auth/google
- Public artifact URL https://domainrating.app/auth/x
- Public artifact URL https://urlscan.io/result/01a17a62-70f5-723e-9260-ff70fbae474d/
Scope and limitations
- No login, consent, form submission, account creation or API metric test was completed. No Ahrefs partnership, metric accuracy, private data handling or safety of every listed site is certified.
Help protect others by sharing this page on social media! The more people who know about domainrating.app, the fewer chances they have to deceive someone else. Help others evaluate domainrating.app by sharing this page on social media!