What Gridinsoft observed on my1.us
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20261023004753-b1725b0f
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Inconclusive
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The tested links are disabled and the roots are informational. Historical redirects reached a bank-branded login on unrelated hosting. The available first-party evidence cannot establish whether the wider short-link service is now free of abusive destinations.
Analyst findings
Review 5 documented observations View evidence
Both roots returned HTTP 200 and identified a Buying Buddy short-link service. The reviewed HTML contained no login form or script; its statement that destinations are restricted is an operator claim.
- Public artifact URL https://my1.us/
- Public artifact URL https://www.my1.us/
-
HTTP status
200
Three codes returned HTTP 410 on both hosts, with a disabled-link page and no redirect, login form or script. This confirms those six responses, not the status of every service link.
- Public artifact URL https://my1.us/tMs68zuFA
- Public artifact URL https://www.my1.us/tMs68zuFA
- Public artifact URL https://my1.us/HRY79w7XP
- Public artifact URL https://www.my1.us/HRY79w7XP
- Public artifact URL https://my1.us/oeXxbqe6a
- Public artifact URL https://www.my1.us/oeXxbqe6a
-
HTTP status
410
An unknown-code test returned HTTP 404 on both hosts. Plain HTTP roots redirected with HTTP 301 to their HTTPS counterparts.
-
HTTP status
404 -
HTTP status
301 -
Redirect destination
https://my1.us/ -
Redirect destination
https://www.my1.us/
The saved October 17 scan records a chain through an external shortener and another service code to an unrelated hosting address. Its screenshot shows Banco CTT branding and a homebanking username field. This is a concrete historical object, not merely a domain blacklist label.
- Public artifact URL https://urlscan.io/result/01a14830-1254-7459-bbc6-01fb95a2d972/
- Public artifact URL https://my1.us/HRY79w7XP
-
Redirect destination
https://l.ze.io/0gooo78-584 -
Redirect destination
https://my1.us/oeXxbqe6a -
Redirect destination
https://cttportugalarea.sviluppo.host/web/net/ - Screenshot SHA-256 5ded8cf152b9f6bb46d139ebc8084c25a06033d35e1c8b7b503d6196f92f04da
The public scan search returned nine submissions in its 30-day window, including the historical redirects and an October 22 disabled-link result. OTX returned zero community pulses for apex and www; this is not a safety verdict. The reviewed 2014 archive root had no substantive service content and does not establish the recent cleanup.
- Public artifact URL https://urlscan.io/domain/my1.us
- Public artifact URL https://otx.alienvault.com/indicator/domain/my1.us
- Public artifact URL https://otx.alienvault.com/indicator/hostname/www.my1.us
- Public artifact URL https://web.archive.org/web/20140517153620/http://my1.us/
Scope and limitations
- Only public roots and three disabled codes were tested; the active customer-controlled namespace was not enumerated or sufficiently sampled for a whole-domain Safe verdict.
- Staff-only destination approval, redirect-chain enforcement and complete removal of abusive links were not independently verified.
- The historical capture shows a bank-branded login and redirects, not a demonstrated credential submission or theft; no current live phishing flow was reproduced.
Help protect others by sharing this page on social media! The more people who know about my1.us, the fewer chances they have to deceive someone else. Help others evaluate my1.us by sharing this page on social media!