What Gridinsoft observed on kimetsport.com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20261029104401-fa906001
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Bounded public review
- Evidence basis
- First-party site analysis External vendor intelligence: Contradictory context — not used for this decision
The reviewed public business and identity evidence did not establish a current harmful object supporting a broad malicious-site classification. The static password-handling concern is documented separately and merits correction. Other applications and private systems remain outside this bounded assessment; the original offending object and any link to the reported AVG warning were not established.
Analyst findings
Review 2 documented observations View evidence
Root and www lead to the Kimet sports-methodology business. Contact and sign-in pages use the same site; selected client code sends contact data to its own API and login credentials to its own authentication endpoint. Terms and Privacy identify Kimet Sport S.L., CIF B95643466. RFEF’s February 24, 2022 announcement names Kimet Sport and links the exact www domain. A May 28, 2025 archived homepage presents the same business. These observations do not establish continuous ownership or every partnership claim. No phishing, malicious file or harmful redirect was reproduced in the reviewed sample.
- Public artifact URL https://kimetsport.com/
- Public artifact URL https://www.kimetsport.com/
- Public artifact URL https://www.kimetsport.com/en/contact
- Public artifact URL https://www.kimetsport.com/en/sign-in
- Public artifact URL https://www.kimetsport.com/en/privacy-policy
- Public artifact URL https://www.kimetsport.com/en/terms-and-conditions
- Public artifact URL https://rfef.es/es/node/81374
- Public artifact URL https://web.archive.org/web/20250528085638/https://www.kimetsport.com/
Static code for the switch from sign-in to registration can store the entered email and password in localStorage under register_prefill. The login page enables that redirect mode. This creates a potential password-persistence exposure to scripts with access to that origin. No credentials were entered and this path was not executed with a secret; exfiltration or account compromise was not demonstrated. A password-free registration handoff and cleanup of persisted secret values would reduce this exposure. The privacy notice also describes unencrypted communications; the applicable channels need clarification because the inspected pages use HTTPS.
- Public artifact URL https://www.kimetsport.com/_app/immutable/chunks/vAXNs80b.js
- Public artifact URL https://www.kimetsport.com/_app/immutable/chunks/BjrZi9Rr.js
- Public artifact URL https://www.kimetsport.com/_app/immutable/chunks/8kQlNbd-.js
- Public artifact URL https://www.kimetsport.com/_app/immutable/chunks/CIy-zxul.js
Scope and limitations
- No credentials, account consent, payment or private-system audit was performed. Unseen content, server files, third-party outcomes and historical ownership were not certified.
Help protect others by sharing this page on social media! The more people who know about kimetsport.com, the fewer chances they have to deceive someone else. Help others evaluate kimetsport.com by sharing this page on social media!