What Gridinsoft observed on Matchday.health
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260903184053-7a5d068c
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Safe
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The reviewed current public website and linked signup, assessment, and payment destinations did not reproduce phishing, malware delivery, or deceptive payment redirection. No specific harmful URL or sample was identified. The unsupported suspicious classification should be removed on this first-party basis. This is a website-security assessment, not an endorsement of coaching results.
Analyst findings
Review 6 documented observations View evidence
The root redirected to the same-site www host, which served a career-coaching and fellowship site for clinicians. Public program, assessment, terms, and privacy links were present. The site disclaimed guaranteed job placement. The reviewed pages did not present an impersonated login, forced executable download, or unrelated malicious redirect.
-
HTTP status
200 -
Final URL
https://www.matchday.health/ - Public artifact URL https://www.matchday.health/legal/terms-of-service
- Public artifact URL https://www.matchday.health/legal/privacy-policy-matchday-health
The signup route led to the program page. Qualification calls used a branded Typeform asking about clinician eligibility, career goals, budget, and contact details, followed by scheduling. Its public form definition had no payment block or card fields. Budget choices ranged from $0 to $8000; the thank-you page said admissions would explain program details and payment options.
- Public artifact URL https://matchdayhealth.pro.typeform.com/to/mum0rJix
- Public artifact URL https://www.matchday.health/thankyou
The linked assessment requested a first name and email. Its public script was configured to send lead and result data to same-origin endpoints and offered a $99 strategy session through Stripe. The rendered Stripe checkout named Matchday Health, described a 1-hour career assessment with a coach, and offered USD $99.00 with optional currency conversion. Card entry was on Stripe, not an observed imitation payment page.
- Public artifact URL https://www.assessment.matchday.health/
- Public artifact URL https://book.stripe.com/aFa3coepLbXJ4NAbuT6J22t
The June 2026 homepage archive showed the same career-transition business. A March 2024 pay-host snapshot was a Poynt payment page with a custom USD amount, not an identified malicious recipient. Certificate history began in April 2023. The pay, app, and community hosts had no current DNS answer in the checks; the jobs host returned a suspended-service response. Historical infrastructure does not establish current abuse.
- Public artifact URL https://web.archive.org/web/20260609153201/https://www.matchday.health/
- Public artifact URL https://web.archive.org/web/20240325205655/https://pay.matchday.health/
Trustpilot displayed 35 reviews and 4.7/5, with reviews spanning 2024-2026 and a mix of invitation labels. Detailed program accounts and a 4-star review were present, alongside many single-review profiles and a posting cluster. No decisive review-farm evidence was established. An official 2025 USPTO record named Matchday Health, Inc.; this does not confirm the claimed D-U-N-S number or service outcomes.
- Public artifact URL https://www.trustpilot.com/review/matchday.health
- Public artifact URL https://tmng-al.uspto.gov/resting2/api/casedoc/cms/case/99167349/office-action/OfficeAction7857739.pdf
Exact-host and parent-domain searches found 2 public urlscan records but detailed results required login. OTX had one broad pulse with 12068 indicators; its matching domain and subdomain entries did not substantiate a harmful URL or sample. Triage returned no reports. Exact-domain public sandbox searches and the checked OpenPhish feed supplied no harmful object. URLhaus, ThreatFox, and Common Crawl access was unavailable, not clean.
- Public artifact URL https://urlscan.io/result/019f88e1-1919-73c2-9f4a-61122dbcd2f2/
- Public artifact URL https://urlscan.io/result/b0d62c66-ea0f-4a6b-9363-ede9becd6d95/
- Public artifact URL https://otx.alienvault.com/pulse/68feb98a8c1b75b4431a3e8e
Scope and limitations
- No personal data, application, appointment, or payment was submitted. Private accounts, service delivery, refunds, and claimed career outcomes were not tested.
- The D-U-N-S claim and individual reviewer identities or transactions were not independently authenticated. A missing public lookup result does not prove a business identifier is invalid.
- The result describes the sampled public pages and linked flows at the recorded time, not every subdomain, private system, future page, or third-party service. Historical and unavailable external records are not clean certifications.
Help protect others by sharing this page on social media! The more people who know about matchday.health, the fewer chances they have to deceive someone else. Help others evaluate matchday.health by sharing this page on social media!